Senior Security Analyst – Cloud Security

pureinsurance; United States; Remote; USD 95,000 - 120,000; Full time

Job summary

PureInsurance is seeking a senior-level security analyst to safeguard multi-cloud environments on AWS and Azure. The role combines hands-on security operations—monitoring, triage, and incident response—with strategic duties such as designing controls, shaping standards, and mentoring engineers.

It is the primary technical authority on cloud security within the infrastructure security org. The role emphasizes ownership of cloud security posture, identity and access management, and alignment to

Qualifications

• Five+ years of experience in cybersecurity or cloud security.
• Hands-on in securing AWS environments and knowledge of Azure security controls.
• Strong understanding of IAM, networking, encryption, and logging fundamentals.
• Familiarity with CSPM, SIEM, and EDR/XDR platforms; incident response experience.
• Ability to translate cloud security risks into practical controls and remediation guidance.

Responsibilities

• Own and improve cloud security controls, guardrails, and posture management across AWS and Azure.
• Secure cloud identity and access, including privileged accounts and secrets management.
• Build and refine cloud monitoring, alerting, and detection telemetry within the SIEM; lead incident response.
• Support vulnerability remediation and configuration hardening with vulnerability management.
• Contribute to security architecture reviews and embed secure-by-design practices with engineering teams.
• Map cloud controls to frameworks like NIST CSF, SOC 2, and PCI DSS for audits.

Skills

AWS security

Azure security

Cloud IAM

SIEM

Incident response

Vulnerability management

Communication skills

Security architecture

Education

Bachelor's degree in Cybersecurity or related field

Tools

AWS CloudTrail

Azure Security Center

Splunk SIEM

EDR/XDR tools

Job description

Role overview

A senior-level security analyst position dedicated to safeguarding multi-cloud environments built on AWS and Azure. The role blends hands‑on operational security work—monitoring, triage, and incident response with strategic responsibilities such as designing controls, shaping standards, and mentoring other engineers. It functions as the primary technical authority on cloud security within the broader infrastructure security organization.

Responsibilities

• Own and continuously improve cloud security controls, guardrails, platform settings, and posture management (CSPM) capabilities across AWS and Azure.
• Secure cloud identity and access, including privileged accounts, service identities, roles, and secrets, while onboarding new accounts, subscriptions, and workloads safely.
• Build and refine cloud monitoring, alerting, and detection telemetry within the SIEM, investigate alerts, lead cloud‑related incident response, and maintain playbooks.
• Support vulnerability remediation, configuration hardening, and patching efforts in partnership with the vulnerability management function.
• Contribute to security architecture reviews for new cloud services and integrations, and embed secure-by-design practices with architecture, platform, infrastructure, and application engineering teams.
• Map cloud controls to frameworks such as NIST CSF, SOC 2, and PCI DSS, and provide evidence for audits and regulatory activities.

Requirements

• At least five years of experience in cybersecurity, cloud security, systems engineering, or a closely related field.
• Hands‑on experience securing AWS environments, paired with working knowledge of Microsoft Azure security services and controls.
• Strong grasp of cloud identity and access management, networking, logging, encryption, secrets management, and related security fundamentals.
• Familiarity with CSPM, SIEM, and EDR/XDR platforms, plus demonstrated experience investigating security events and supporting incident response.
• Ability to translate cloud security risks into practical technical controls and remediation guidance, with clear written and verbal communication.

Nice to have

• Industry‑recognized credentials such as AWS Certified Security – Specialty, Microsoft Certified Azure Security Engineer Associate (AZ-500), CCSP, AWS Certified Solutions Architect, or CISSP.
• Experience evaluating or integrating cloud security tools, scripting for automation, and prior insurance or financial services industry exposure.

Benefits and work setup

• Base salary range of $95,000 to $120,000, with final compensation based on skills, experience, and geographic market alignment.
• Opportunities for professional development and on-the-job learning, supported by a culture that emphasizes mentorship, transparency, and constructive collaboration.
• New hires are expected to be onsite at the office during their first week of onboarding; occasional participation in an infrastructure security on‑call rotation, including weekends and after‑hours, is required.