Information Security Analyst

Location: Philadelphia, PA

Schedule: Hybrid – Onsite Tuesday, Wednesday, and Thursday; Remote Monday and Friday

Residency Requirement: Must reside and work in Pennsylvania, New Jersey, or Delaware

Position Overview

We are seeking an experienced Information Security Analyst / Senior Information Security Analyst to join a collaborative security team supporting enterprise cloud infrastructure, security operations, and risk management initiatives.

This role will focus heavily on cloud security across Google Cloud Platform (GCP) and Microsoft Azure, with an emphasis on identifying vulnerabilities, strengthening security posture, and providing technical guidance to cloud engineering and infrastructure teams.

The ideal candidate is a hands-on security professional who can independently assess security risks, recommend remediation strategies, and collaborate with cross-functional teams to implement security improvements.

Candidates at both the Analyst and Senior Analyst levels will be considered based on experience and technical expertise.

Key Responsibilities

• Serve as a cloud security subject matter expert (SME) across GCP and Azure environments, with a strong focus on GCP security.
• Conduct cloud security assessments, identify vulnerabilities, evaluate configurations, and recommend remediation strategies.
• Utilize security tools such as Google Security Command Center, Microsoft Defender for Cloud, and Cloud Security Posture Management (CSPM) platforms.
• Support the evaluation, implementation, and migration of cloud security posture management solutions.
• Monitor cloud security posture, review Secure Score reports, and track vulnerability remediation efforts.
• Participate in cloud infrastructure and engineering projects to provide security guidance, architecture recommendations, and risk assessments.
• Evaluate identity and access management (IAM) controls, including Microsoft Entra ID, Okta, MFA, and cloud access permissions.
• Support enterprise security initiatives, including Microsoft Defender for Office 365 and vulnerability management programs.
• Conduct security risk assessments, identify control gaps, and support compliance with HITRUST, HIPAA, SOC 2, and NIST frameworks.
• Partner with cloud engineering, infrastructure, and application teams to investigate security concerns and implement corrective actions.
• Develop and maintain security documentation, technical procedures, policies, and operational playbooks.
• Communicate security findings, risks, and recommendations to technical and nontechnical stakeholders.
• Contribute to ongoing security improvements, technology enhancements, and cloud security initiatives.

Required Qualifications

• Experience in information security, cloud security, or enterprise security operations.
• Hands-on experience securing GCP and/or Microsoft Azure environments, with strong GCP expertise highly preferred.
• Experience conducting cloud security assessments, identifying vulnerabilities, and improving security posture.
• Familiarity with Google Security Command Center, Microsoft Defender for Cloud, or comparable CSPM tools.
• Knowledge of identity and access management (IAM), including Microsoft Entra ID, Okta, and cloud-based access controls.
• Understanding of security governance, risk management, and compliance frameworks such as HITRUST, HIPAA, SOC 2, or NIST.
• Experience evaluating security risks, recommending remediation strategies, and collaborating with technical teams.
• Strong analytical, problem-solving, documentation, and communication skills.
• Ability to work independently while contributing to a collaborative security team.

Preferred Qualifications

• Experience implementing, migrating, or managing CSPM platforms.
• Advanced knowledge of GCP security tools, particularly Google Security Command Center.
• Experience with Microsoft security technologies, including Defender for Cloud, Defender for Office 365, Entra ID, and Secure Score.
• Familiarity with Qualys, Proofpoint, and enterprise vulnerability management solutions.
• Experience supporting cloud migrations, security architecture reviews, and security governance improvements.
• Experience developing security playbooks, technical documentation, and operational procedures.
• Cloud security certifications such as CCSP, Microsoft AZ-500, Google Professional Cloud Security Engineer, or equivalent credentials.

Work Environment

This position is part of a six-person information security team supporting a predominantly Microsoft-based enterprise environment with significant GCP and Azure security responsibilities.

The successful candidate will be a proactive, technically skilled security professional who can take ownership of security assessments, collaborate effectively across teams, and contribute to strengthening the organization's overall cloud security posture.