Lead Cloud Security & Incident Response Analyst

WGU; Salt Lake City (UT); On-site; USD 161,000 - 250,000; Full time

Benefits offered by this job

Bonuses eligible

Health/dental/vision insurance

HSA/FSA options

Wellbeing program

Tuition assistance

11 paid holidays

Parental leave

Job summary

WGU in Salt Lake City is seeking a senior Information Security professional to lead incident response, threat detection, and cloud security initiatives across AWS and other platforms. This full-time, in-office role focuses on building security automation, developing detection logic, and mentoring analysts while advancing defenses in a fast-paced environment.

You will architect cloud analytics, align with MITRE ATT&CK, and drive CI/CD security integration.

Qualifications

• Bachelor’s degree or higher in IT Security, CS, Engineering, or related field
• 7+ years of information security experience across domains
• Hands-on MITRE ATT&CK implementation experience
• Experience creating SIEM content rules to detect malicious or abnormal events
• Hands-on with infrastructure‑as‑code and cloud resources (e.g., CloudFormation, CDK)
• Expert scripting (Bash, Python) with automation focus
• Experience with open-source security tools (Kali, Nessus, Burp, NMap, Wireshark)
• Hands-on AWS API usage (Lambda, DynamoDB, EC2, IAM, CloudWatch)
• Security certifications (CISSP, GIAC, ISACA, CEH)
• Knowledge of cloud and data security in AWS
• CI/CD security integration experience
• SaaS/PaaS enterprise security architecture
• Data-driven risk analysis and strong communication
• Regulatory knowledge including GDPR/CCPA

Responsibilities

• Lead complex incident response and investigation efforts
• Develop detection use-cases aligned to MITRE ATT&CK
• Architect cloud threat analytics across AWS and other clouds
• Design and implement SIEM content security rules
• Automate security across cloud infra, CI/CD, data security
• Identify gaps and lead security solutions from requirements to operation
• Mentor analysts and lead in demanding security situations
• Collaborate with ServiceNow integrations and cross-team efforts

Skills

MITRE ATT&CK Framework

SIEM content development

Cloud security

Python/Bash scripting

Data analysis

Communication

Education

Bachelor’s Degree in IT Security, Computer Science, Engineering, or related field

Security certifications (CISSP, GIAC, ISACA, CEH, etc.)

Tools

Kali

Nessus

Burp Suite

NMap

Wireshark

Metasploit

Job description

WGU in Salt Lake City is seeking a senior Information Security professional to lead incident response, threat detection, and cloud security initiatives across AWS and other platforms. This full-time, in-office role focuses on building security automation, developing detection logic, and mentoring analysts while advancing defenses in a fast-paced environment.

You will architect cloud analytics, align with MITRE ATT&CK, and drive CI/CD security integration.