Cyber Security Analyst – Cloud, DevSecOps & AI Security
ISO New England · Holyoke, MA, US ·
- Work mode
- Hybrid
- Category
- Security
ISO New England · Holyoke, MA, US ·
ISO New England is seeking an experienced Cyber Security Analyst to support and enhance enterprise cloud security initiatives, with a primary focus on AWS and/or Microsoft Azure. This role will focus on identifying and addressing cloud security vulnerabilities, misconfigurations, access risks, and security control gaps. The successful candidate will collaborate with cloud engineering, application development, infrastructure, architecture, IAM, SOC, and other teams to strengthen security across enterprise cloud environments. Experience in AI security, DevSecOps, and regulated environments is an added advantage but is not required.
What we offer you:
A stable, mission-driven workplace where your impact truly matters
A highly engaged work environment that values inclusion, collaboration, and employee safety and wellbeing
Competitive compensation with a base salary + performance bonus
Robust benefits package, including:
Enhanced 401(k) and financial planning support
Tuition reimbursement and professional development
Wellness programs, including an onsite gym
Flexible work hours
Employee Business Networks
Free coffee at our onsite café
Hybrid work environment (3 days/week onsite)
Distance-based relocation assistance available
5/6 person paid on-call rotation
How you will make an Impact
Conduct security assessments across AWS and/or Azure environments.
Identify cloud security vulnerabilities, misconfigurations, excessive permissions, and security control gaps.
Review cloud IAM, network security, workload security, data protection, logging, monitoring, and security configurations.
Provide practical security recommendations and work with technical teams to remediate identified risks.
Support cloud security posture management and ongoing monitoring of cloud environments.
Review new cloud solutions, architectures, and technology changes and provide security guidance.
Collaborate with application development, cloud engineering, infrastructure, enterprise architecture, IAM, network, SOC, and business teams to integrate security into projects and operational processes.
Support vulnerability assessments, configuration reviews, remediation tracking, security monitoring, and compliance activities as needed.
Support and maintain cloud and enterprise security technologies, including CNAPP/CSPM, CIEM, vulnerability management, EDR, SIEM, and related security tools.
Monitor evolving cloud security threats, technologies, and industry best practices.
What we are looking for
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent relevant professional experience.
Relevant cybersecurity or cloud certifications are a plus but not required.
3+ years of cloud security engineering.
Hands-on experience with AWS and/or Microsoft Azure.
Understanding of cloud security concepts and controls, including:
o Identity and access management (IAM)
o Cloud security configurations
o Network and workload security
o Data protection
o Logging and monitoring
o Vulnerability and configuration management
Experience identifying and helping remediate cloud security vulnerabilities and misconfigurations.
Strong analytical and troubleshooting skills.
Strong communication and cross-functional collaboration skills.
Ability to work independently and manage multiple priorities.
Desired not required
5-7 years of general cybersecurity experience is preferred.
Experience supporting enterprise-scale AWS and/or Azure environments.
Experience working collaboratively with cloud engineering, infrastructure, application development, architecture, IAM, and SOC teams.
AI security knowledge or experience is considered an added advantage.
AI Security, including generative AI, Large Language Models (LLMs), AI governance, AI risk management, or securing AI-enabled applications.
Understanding of AI security risks such as prompt injection, sensitive-data leakage, insecure AI integrations, data/model poisoning, and model manipulation.
DevSecOps and CI/CD pipeline security.
NERC CIP or other regulated-environment security experience.
Familiarity with security frameworks and industry best practices.
This employer will not sponsor applicants for work visas for this position (ex: H-1B, F-1/CPT/OPT, O-1, E-3, TN, J, etc.).
The expected salary range for this position is $127,000 - $150,000 per year. This role is also eligible for an annual performance bonus, comprehensive health insurance (medical, dental and vision), flexible spending and health savings accounts, a 401(k) plan with generous employer contributions and a student debt benefit, life and AD&D insurance, disability insurance, critical illness and hospital indemnity benefits, paid time off, paid leave, a wellness program, an employee assistance program and other great company perks.
#LI-HYBRID