Cloud Security Analyst implements and manages Wiz for GCP security posture, triages vulnerabilities, and partners with DevOps to enforce secure configurations and remediate risks.
emergiTEL is hiring a Cloud Security Analyst for our client in the financial services industry. This is a Contract role.
Compensation: $60 - $80/hour Location: Hybrid
Job Description: -
Implement, Operate and administer Wiz Advanced Cloud as the primary cloud security posture and vulnerability management platform, including policy tuning, coverage expansion, and integration with ticketing and reporting systems.
Continuously monitor GCP environments for misconfigurations, vulnerabilities, exposed secrets, excessive permissions, and toxic combinations, and drive them to resolution.
Triage and prioritize cloud findings based on exploitability and business impact, and integrate scoring into the enterprise vulnerability risk framework (WVRS) for unified reporting alongside application security findings.
Partner with cloud platform, DevOps, and application engineering teams to remediate findings, providing clear guidance and technical context rather than just raw scan output.
Maintain an accurate, continuously updated inventory of cloud assets, workloads, and identities to close visibility gaps and eliminate shadow infrastructure.
Define and maintain secure configuration baselines and guardrails for GCP, working with Platform/Cloud Engineering to embed controls into infrastructure-as-code and CI/CD pipelines.
Partner with Enterprise IAM to identify and reduce excessive cloud permissions, service account sprawl, and privilege escalation paths.
Own the intake, tracking, and escalation process for cloud security findings, ensuring clear ownership and SLA-driven remediation across engineering teams.
Perform ad hoc validation and risk reviews for high-risk changes, new cloud workloads, or emerging cloud threats.
Produce clear, recurring reporting on cloud risk posture, remediation velocity, and trends for technology leadership and governance stakeholders.
Stay current on cloud-native attack techniques, provider security capabilities, and evolving best practices, and bring recommendations back into the program.
Top Skills:
Hands-on GCP security experience,
Cloud IAM and privilege risk fluency,
Ability to drive vulnerability remediation with engineering teams,
IaC/CI-CD literacy (Terraform + pipelines),
Wiz Platform Administration Experience
Vacancy Status / Statut du poste
This is an active position currently open for hiring. Use of Artificial Intelligence / Utilisation de l'intelligence artificielle
No artificial intelligence (AI) is used in the screening or selection process. All applications are reviewed by our recruitment team. Equal Opportunity / Égalité des chances
emergiTEL is committed to creating a diverse and inclusive workplace. We welcome applications from all qualified individuals regardless of background. Hiring decisions are based solely on skills, experience, and qualifications relevant to the role.