Cloud Security Analyst

- Implement security controls and ensure compliance for cloud environments on AWS, GCP, or Azure in line with FISMA, NIH policies, and federal security standards - Recommend, design, and support the implementation of Cloud security services and controls, including Identity Access, Privileged Access, Vulnerability Management, Configuration Compliance, Encryption, and centralized security log management - Monitor cloud environments for security incidents, anomalies, and configuration variations using SIEM tools (e.g., Splunk), conduct vulnerability assessments, track resolutions, and maintain dashboards with quantifiable metrics to present the overall security status - Integrate and optimize security solutions such as Splunk, Tenable, and other data sources to enhance continuous monitoring, event correlation, and compliance visibility across NLMs hybrid environment - Investigate and respond to security incidents and alerts, perform root-cause analysis and appropriate remediation actions following NIHs established incident response plan - Conduct threat modeling and security assessments of cloud deployments to identify and mitigate vulnerabilities, develop security requirements, and provide guidance for applications transitioning from on-premises to cloud environments - Enhance and automate security and compliance checks using a combination of tools and scripting; evaluate emerging platforms (including AI-based capabilities) to improve coverage, visibility, and operational effectiveness - Provide security guidance, best practices, and compliance support to developers, operations teams, system owners, and other stakeholders, promoting overall security awareness