Cloud Security Analyst

ECS is seeking a Cloud Security Analyst to work in our Washington, DC office.

Job Description:

• Analyze cloud services, APIs, and log payloads to ensure industry standards and security needs.

• Provide development and revision from Cyber leads on House solutions that incorporate Cloud technologies. Also provide advisement to CAO & Cyber teams in current technologies to include new cloud, mobile and desktop application work products.

• Provide technical support for Cybersecurity on related Cloud technologies and other assignments.

• Provide analysis and reporting on the cloud products currently in use at the House to include high-risk services, data usage, and threats.

• Executing cloud security controls and appropriate processes for designing security capabilities.

• Collaborate with IT, Data Engineers, and Product Managers to optimize security across cloud and on-premises ecosystems.

• Create technical documentation as needed.

• Work closely with security team for additional security practices and support.

• Other duties as assigned.

Salary Range: $93,000 - $103,000

General Description of Benefits

Required Skills:

• Bachelor's degree in a related field.

• 5+ years of experience in Information Technology, Cybersecurity, or a related field.

• 1+ years of experience implementing or supporting cloud-based cyber security.

• Understanding and familiarity with cloud architectures (e.g., SaaS, PaaS), common commercial cloud systems (e.g., Google Workspace, Microsoft 365, AWS, Oracle) and cloud security solutions (e.g., Cloud Access Security Broker, Multi-factor Authentication, Zero Trust Architecture).

Desired Skills:

• Knowledge of common cyber security technical controls and their application to cloud systems, such as access control, audit and accountability, configuration management, identification and authentication, system and communication protection, and system and information integrity.

• Understanding of US Government cyber security standards and methodologies including FISMA, the NIST Cyber Security Framework, NIST 800-37 Risk Management Framework, NIST 800-53

• Cyber Security Controls, and the Federal Risk and Authorization Management Program (FedRAMP).

• Knowledge of other common industry cyber security standards and organizational best practices.

• Knowledge of current cyber security threats and vulnerabilities.

• Understanding of basic information technology concepts, systems, and network architecture.

• Proven success in contributing to a team-oriented environment.

• Demonstrated experience supporting CASB/SASE solutions.

• Achievement of CCSP (Certified Cloud Security Professional) or industry cloud certification preferred.

ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, sex, age, sexual orientation, gender identity or expression, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, status as a crime victim, disability, protected veteran status, or any other characteristic protected by law. ECS promotes affirmative action for minorities, women, disabled persons, and veterans.

ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3800+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.