Cloud Security Analyst

Job Title: Cloud Security Analyst

Job ID: 6013

City: Washington

State: District of Columbia

Job Type:

Compensation: $ to $

Centurion is looking for a Cloud Security Analyst with an Active Secret Clearance for an on site role in Washington, DC

Required Skills:

• 3+ Years of Experience
• Previous experience with Cloud Security

Preferred Skills: Gov Cloud Experience, Multi-cloud security, Vulnerability management, Federal security compliance familiarity, Strong reporting and data storytelling, Hands-on with CNAPP/CSPM platforms, RMF, FedRAMP

Day-to-day Responsibilities: On a daily basis, the professional will support a federal agency’s cloud security management function by reviewing, analyzing, reporting, and tracking cloud service vulnerabilities; using cloud security posture and reporting data from major platforms (e.g., Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP)) to develop subscription/account-level mitigation recommendations; and producing detailed, customer-specific reports that enable data-driven communication among leadership and stakeholder groups to improve security posture and reduce risk. The role will manage and oversee cloud-native and third-party security tools across development and production environments—including cloud-native application protection platform (CNAPP), cloud security posture management (CSPM), and endpoint protection—while planning and executing security tool deployments (account/subscription onboarding, telemetry collection, and alignment to security requirements and operating processes). The individual will also automate security workflows where feasible to improve the consistency, speed, and auditability of vulnerability identification, prioritization, and remediation tracking, and will map subscription/account-level vulnerabilities and potential exploits to existing System Plan of Action & Milestones (POA&Ms) to ensure findings are documented, monitored, and driven through remediation for risk mitigation and situational awareness.

Expected Deliverables: Cloud vulnerability & posture reports, Subscription/account mitigation plans, Security tooling onboarding & configuration packages, RMF artifacts

Education: Undergraduate degree or higher