Cloud Security Analyst
Summary
On-site Cloud Security Analyst supporting a federal agency's cloud security management function in Washington, DC: analyzing and reporting cloud vulnerabilities across Azure, AWS, and GCP, managing CNAPP/CSPM and endpoint security tooling, and producing posture reports and RMF artifacts. Requires an active Secret clearance and 3+ years of cloud security experience.
Centurion is looking for a Cloud Security Analyst with an Active Secret Clearance for an on site role in Washington, DC
Required Skills:
- 3+ Years of Experience
- Previous experience with Cloud Security
Preferred Skills: Gov Cloud Experience, Multi-cloud security, Vulnerability management, Federal security compliance familiarity, Strong reporting and data storytelling, Hands-on with CNAPP/CSPM platforms, RMF, FedRAMP
Day-to-day Responsibilities: On a daily basis, the professional will support a federal agency’s cloud security management function by reviewing, analyzing, reporting, and tracking cloud service vulnerabilities; using cloud security posture and reporting data from major platforms (e.g., Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP)) to develop subscription/account-level mitigation recommendations; and producing detailed, customer-specific reports that enable data-driven communication among leadership and stakeholder groups to improve security posture and reduce risk. The role will manage and oversee cloud-native and third-party security tools across development and production environments—including cloud-native application protection platform (CNAPP), cloud security posture management (CSPM), and endpoint protection—while planning and executing security tool deployments (account/subscription onboarding, telemetry collection, and alignment to security requirements and operating processes). The individual will also automate security workflows where feasible to improve the consistency, speed, and auditability of vulnerability identification, prioritization, and remediation tracking, and will map subscription/account-level vulnerabilities and potential exploits to existing System Plan of Action & Milestones (POA&Ms) to ensure findings are documented, monitored, and driven through remediation for risk mitigation and situational awareness.
Expected Deliverables: Cloud vulnerability & posture reports, Subscription/account mitigation plans, Security tooling onboarding & configuration packages, RMF artifacts
Education: Undergraduate degree or higher