Security Automation Analyst - Multi-Cloud & Compliance

queracomputinginc; Boston (MA); On-site; USD 175,000 - 200,000; Full time

Job summary

QuEra is seeking a Security Analyst to join our growing Security & Compliance team in Boston. You will help build security automations, establish baselines for on‑premises and cloud environments, and support vulnerability management and audits.

You will work with DevOps and engineers to remediate vulnerabilities across multi‑cloud and on‑prem assets, write scripts in Python/PowerShell/Bash, and contribute to SOC 2 and ISO 27001 evidence programs, dashboards, and security posture improvements.

Qualifications

• Bachelor's degree or equivalent related experience.
• Minimum of two years of experience with security exposure in information security, systems administration, or DevOps.
• Proficient in at least one scripting language (Python, PowerShell, or Bash).
• Strong understanding of operating systems, networking, and cloud fundamentals.
• Knowledge of security frameworks such as NIST.
• Familiarity with vulnerability management tools (e.g., Tenable, Qualys, Rapid7, AWS Inspector, or Microsoft Defender).
• Working knowledge of AWS, Azure, and/or Oracle Cloud security controls and services.
• Comfortable working cross-functionally with engineering, IT, and other teams as needed.

Responsibilities

• Review and triage findings from vulnerability scans, penetration tests, and configuration assessments to identify potential security risks.
• Work with DevOps, engineers, and system owners to remediate vulnerabilities across multi-cloud and on-prem assets.
• Support secure configuration baselines for AWS, Azure, and Oracle Cloud resources.
• Monitor cloud environments for misconfigurations and suspicious activity.
• Assist with IAM policy reviews and privilege audits.
• Write scripts to automate detection, reporting, or remediation of security issues.
• Integrate security tools and data into dashboards or workflow systems (e.g., Jira, SIEM, or ticketing).
• Provide technical evidence and control implementation support for SOC 2, ISO 27001, or customer security assessments.
• Partner with the compliance team to map technical controls to framework requirements.
• Assist with incident triage, response, and root cause analysis.
• Support endpoint protection, log monitoring, and threat intelligence initiatives.

Skills

Python

PowerShell

Bash

Cloud fundamentals

Networking

Operating systems

NIST security framework

Vulnerability management

Cross-functional collaboration

Communication skills

Education

Bachelor's degree or equivalent experience

Tools

Tenable

Qualys

Rapid7

AWS Inspector

Microsoft Defender

Splunk

Microsoft Sentinel

Job description

QuEra is seeking a Security Analyst to join our growing Security & Compliance team in Boston. You will help build security automations, establish baselines for on‑premises and cloud environments, and support vulnerability management and audits.

You will work with DevOps and engineers to remediate vulnerabilities across multi‑cloud and on‑prem assets, write scripts in Python/PowerShell/Bash, and contribute to SOC 2 and ISO 27001 evidence programs, dashboards, and security posture improvements.