Information Security Analyst

We're looking for a mid-level Information Security Analyst who is comfortable working directly with a client to help protect their cloud environment and security operations. This role is ideal for someone who enjoys hands-on SOC work, understands cloud security (especially AWS), and can communicate clearly and professionally with stakeholders outside their own team.
You'll be a trusted security partner—helping investigate incidents, improve detections, and strengthen cloud security while representing our team with confidence and integrity.

Responsibilities
Actively participate in SOC operations, including:
Monitoring SIEM, EDR, and cloud security alerts
Investigating suspicious activity and determining impact
Escalating, containing, and responding to security incidents
Perform incident response across cloud and endpoint environments and contribute to post-incident reviews
Secure and assess AWS environments, including IAM, VPCs, S3, EC2, and logging services
Review and tune detections from tools such as AWS Guard Duty, Security Hub, Cloud Trail, and Config
Conduct vulnerability management: scanning, prioritization, remediation tracking, and validation
Collaborate with engineering and infrastructure teams to improve:
Secure cloud architecture
CI/CD and infrastructure-as-code security
Logging and monitoring coverage
Help improve SOC processes, runbooks, and alert quality (reducing noise, increasing signal)
Contribute to threat modeling, risk assessments, and security documentation
Stay current on cloud threats, attacker techniques, and AWS security changes

Qualifications
2–5 years of experience in information security, SOC, or security operations
Hands-on experience with cloud security, preferably AWS
Solid understanding of:
SOC workflows and incident response lifecycle
Cloud IAM, least privilege, and access controls
Network and endpoint security concepts
Experience working with:
SIEM platforms and log analysis
EDR/XDR or endpoint protection tools
AWS security services (Cloud Trail, Guard Duty, Security Hub, Config)
Ability to analyze alerts, identify root cause, and communicate findings clearly
Security/AWS certifications (Security Specialty, Solutions Architect, or Sys Ops)

Experience with SOAR tools or alert automation
Familiarity with MITRE ATT&CK and threat hunting concepts

Experience with Terraform, Cloud Formation, or CI/CD security
Scripting experience (Python, Bash, etc.)