Senior Cyber Security Analyst - Cloud, Devsecops & AI Security

ISO New England is seeking an experienced Cyber Security Analyst to support and enhance enterprise cloud security initiatives, with a primary focus on AWS and/or Microsoft Azure. This role will focus on identifying and addressing cloud security vulnerabilities, misconfigurations, access risks, and security control gaps. The successful candidate will collaborate with cloud engineering, application development, infrastructure, architecture, IAM, SOC, and other teams to strengthen security across enterprise cloud environments. Experience in AI security, DevSecOps, and regulated environments is an added advantage but is not required.

What we offer you:

A stable, mission-driven workplace where your impact truly mattersA highly engaged work environment that values inclusion, collaboration, and employee safety and wellbeingCompetitive compensation with a base salary + performance bonusRobust benefits package, including:

Enhanced 401(k) and financial planning supportTuition reimbursement and professional developmentWellness programs, including an onsite gymFlexible work hoursEmployee Business NetworksFree coffee at our onsite café

Hybrid work environment (3 days/week onsite)Distance-based relocation assistance available5/6 person paid on-call rotation

How you will make an Impact

Conduct security assessments across AWS and/or Azure environments.

Identify cloud security vulnerabilities, misconfigurations, excessive permissions, and security control gaps.

Review cloud IAM, network security, workload security, data protection, logging, monitoring, and security configurations.

Provide practical security recommendations and work with technical teams to remediate identified risks.

Support cloud security posture management and ongoing monitoring of cloud environments.

Review new cloud solutions, architectures, and technology changes and provide security guidance.

Collaborate with application development, cloud engineering, infrastructure, enterprise architecture, IAM, network, SOC, and business teams to integrate security into projects and operational processes.

Support vulnerability assessments, configuration reviews, remediation tracking, security monitoring, and compliance activities as needed.

Support and maintain cloud and enterprise security technologies, including CNAPP/CSPM, CIEM, vulnerability management, EDR, SIEM, and related security tools.

Monitor evolving cloud security threats, technologies, and industry best practices.

What we are looking for

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent relevant professional experience.

Relevant cybersecurity or cloud certifications are a plus but not required.

3+ years of cloud security engineering.

Hands-on experience with AWS and/or Microsoft Azure.

Understanding of cloud security concepts and controls, including:o Identity and access management (IAM)o Cloud security configurationso Network and workload securityo Data protectiono Logging and monitoringo Vulnerability and configuration management

Experience identifying and helping remediate cloud security vulnerabilities and misconfigurations.

Strong analytical and troubleshooting skills.

Strong communication and cross-functional collaboration skills.

Ability to work independently and manage multiple priorities.

Desired not required

5-7 years of general cybersecurity experience is preferred.

Experience supporting enterprise-scale AWS and/or Azure environments.

Experience working collaboratively with cloud engineering, infrastructure, application development, architecture, IAM, and SOC teams.

AI security knowledge or experience is considered an added advantage.

AI Security, including generative AI, Large Language Models (LLMs), AI governance, AI risk management, or securing AI-enabled applications.

Understanding of AI security risks such as prompt injection, sensitive-data leakage, insecure AI integrations, data/model poisoning, and model manipulation.

DevSecOps and CI/CD pipeline security.

NERC CIP or other regulated-environment security experience.

Familiarity with security frameworks and industry best practices.

This employer will not sponsor applicants for work visas for this position (ex: H-1B, F-1/CPT/OPT, O-1, E-3, TN, J, etc.).

The expected salary range for this position is $127,000 - $150,000 per year. This role is also eligible for an annual performance bonus, comprehensive health insurance (medical, dental and vision), flexible spending and health savings accounts, a 401(k) plan with generous employer contributions and a student debt benefit, life and AD&D insurance, disability insurance, critical illness and hospital indemnity benefits, paid time off, paid leave, a wellness program, an employee assistance program and other great company perks.

#LI-HYBRID