Cloud Security Analyst

Position Summary

Cloud Security Analysis and Compliance

• Conduct and review cloud system assessments and coordinate required configuration changes with cloud engineers and security leadership.
• Coordinate penetration tests and related infrastructure configuration changes.
• Operate and optimize CSPM, CNAPP, CASB, and SaaS platform risk and permission assessments.
• Maintain compliance with cloud security frameworks such as the CSA Cloud Controls Matrix.
• Define, select, and implement cloud security controls and support application and web security programs.

Security Operations

• Monitor network traffic for malicious activity and investigate security breaches according to established procedures.
• Prepare security activity reports, review user access rights, and conduct threat hunting.
• Operate and maintain DLP, firewall, endpoint, intrusion detection and prevention, and cloud security infrastructure.
• Support identity-as-a-service infrastructure and maintain networking, cloud, and computer system security.

Architecture and Risk

• Contribute to security architecture, technical infrastructure roadmaps, and security architecture patterns.
• Participate in security projects, risk assessments, audits, vulnerability scans, penetration testing, and access-control reviews.
• Assess systems holding college data for standards compliance and ongoing security posture.
• Support security awareness, threat intelligence, and training initiatives.

Automation and Projects

• Design, install, configure, test, and maintain security orchestration workflows.
• Validate and monitor automation outputs and help troubleshoot cybersecurity service performance.
• Provide consultation and training to project teams and other resources.
• Gather technical requirements, collaborate with departments, and participate in IT project management teams.

Minimum Qualifications

• At least 2 years of cybersecurity-related education or experience, or 5 years of development, support, or systems administration experience.
• Diploma in Computer Science or equivalent.
• Knowledge of cloud system design, Windows 10 and Server 2012 R2 or later, containers, and infrastructure as code.
• Knowledge of SSL, DNS, TCP/IP, operating system configuration, and firewall configuration and operation.
• Strong oral and written communication, interpersonal, and problem-solving skills.

Introductory Experience

• Introductory experience in penetration testing, vulnerability management, development methodologies, coding, and best practices.
• Introductory experience with automation and integrations, digital forensics and incident response, red teaming or blue teaming, and risk assessments.

Preferred Qualifications

• Experience managing Microsoft Azure services, Microsoft-based web systems, and the Microsoft Defender suite, including Defender for Cloud, CSPM, CNAPP, and CASB.
• Knowledge of Microsoft Azure, Azure Active Directory, and application or web security involving pipelines, best practices, and encryption.
• Equivalent combinations of education and experience may be considered.

Role Details

• The position is listed as a continuous exempt opening at Bow Valley College.
• Successful candidates must provide government-issued identification and proof of educational qualifications upon hire and may require an enhanced police information check.