Senior Security Analyst – Cloud Security at PURE Insurance

Job description

About The Role The Senior Security Analyst – Cloud Security will be responsible for securing and continuously improving PURE’s cloud environments, cloud-native security capabilities, and cloud security operations. This role will serve as a senior member of the Infrastructure Security team and the primary technical resource for AWS and Azure security, with responsibility for implementing, operating, and improving cloud security controls across the organization. The ideal candidate will bring hands-on experience securing cloud platforms, implementing cloud security controls, investigating security events, and partnering with engineering and technology teams to reduce risk. This role will balance strategic cloud security initiatives with day-to-day operational responsibilities, including incident response, ticket and alert triage, and participation in the Infrastructure Security on-call rotation. What You’ll Do Cloud Security & Controls Own, operate, and maintain cloud security capabilities, controls, guardrails, and platform settings across AWS and Azure environments Monitor and improve Cloud Security Posture Management (CSPM) capabilities Develop and maintain cloud security standards, baselines, and secure configuration guidance Secure cloud identity and access, including privileged access, service accounts, roles, and secrets management Support the onboarding of cloud accounts, subscriptions, and workloads to ensure alignment with security requirements Evaluate cloud security technologies and support security tool integrations and optimization efforts Develop automation using APIs, scripting, and cloud-native tooling to improve control validation, reporting, and security operations Monitoring & Incident Response Build and enhance cloud monitoring, alerting, and detection capabilities, including cloud telemetry within SIEM and security monitoring platforms Investigate cloud security alerts, suspicious activity, and potential threats Respond to cloud-related security incidents and support containment, remediation, and post-incident reviews Develop and maintain cloud-focused incident response procedures and playbooks Participate in daily security operations, including reviewing and resolving security-related tickets, alerts, requests, and escalations Participate in the Infrastructure Security on-call rotation, including occasional weekend and after-hours work as required Partnership & Risk Management Participate in security architecture reviews and assess cloud designs for new technologies, services, and integrations Partner with Enterprise Architecture, Infrastructure Engineering, Platform Engineering, Application Development, and Technology Operations to embed secure-by-design practices Support audit, compliance, and regulatory activities by providing cloud control evidence and mapping controls to frameworks such as NIST CSF, SOC 2, and PCI DSS Partner with Vulnerability Management to support patching, configuration hardening, and remediation of cloud vulnerabilities and misconfigurations Collaborate with Infrastructure Security team members across Endpoint Security, Vulnerability Management, and AI Security Serve as a cloud security subject matter expert and help strengthen the broader team through mentoring, knowledge sharing, and documented standards What You ll Need 5 years of experience in cybersecurity, cloud security, systems engineering, or a related discipline Hands-on experience securing AWS environments Experience with Microsoft Azure security services and controls Strong understanding of cloud identity and access management principles Experience with CSPM, SIEM, EDR/XDR, or similar security technologies Experience investigating security events and supporting incident response Knowledge of cloud networking, logging, monitoring, encryption, and secrets management concepts Experience collaborating with infrastructure, architecture, platform, and application engineering teams Ability to translate cloud security risks into practical technical controls and remediation guidance Strong written and verbal communication skills What Will Make You Stand Out AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate (AZ-500), CCSP, AWS Certified Solutions Architect, CISSP, or an equivalent certification Experience with CrowdStrike Falcon, Falcon Cloud Security, Microsoft Defender for Cloud, or similar platforms Experience with Infrastructure as Code technologies such as Terraform Experience securing containerized and serverless workloads, including Kubernetes (EKS/AKS), container image scanning, and runtime protection Experience with Python, PowerShell, APIs, or other security automation methods Experience developing cloud detections, security analytics, or monitoring use cases Financial services, insurance, or other regulated industry experience ‌ What We Do We re a member-owned property and casualty insurer designed exclusively for financially successful families and driven by a purpose of doing what is right for our members. We provide exceptional service, hospitality and care, we partner with our members to help prevent losses and we create smart insurance solutions at fair prices. We aim for our members to love their insurance . It is our mission is to create a membership experience so compelling that our members never want to leave. Who We Are We want to be transparent about what we expect from each other. From PURE, you can expect: Opportunities to stretch and grow: your professional and personal development matters to us. We’re committed to providing experiences through on-the-job learning and professional development that increase your impact and rewards. Clarity and kindness: you can rely on us to be open, honest and supportive, offering clarity on what success looks like. Support in good times and bad: we believe in showing up for each other consistently, not only when it’s easy. You can expect a thoughtful partner, even when we disagree. A community that cares: we are committed to sustaining a community in which each person feels cared for as an individual. We lift each other up, celebrate wins together and support one another through challenges in work and life. Who You Are All of the strongest relationships are a partnership- a two way street. So here’s what we ask of you: Aim to bring your best every day: you’re here because you want to be part of a team that makes a real impact and aims high. Be a student and a teacher: share your knowledge and talents and be willing to listen and learn from those around you. Get comfortable being uncomfortable: we face tough moments and obstacles with a “courage over comfort” approach and a positive, solutions-oriented mindset. Be a culture builder: building a positive culture is everyone s responsibility, based on care, respect and openness to diverse perspectives. ‌ The base salary for this role can range from $95,000 to $120,000 based on a full-time work schedule. An individual’s ultimate compensation will vary depending on job-related skills and experience, geographic location, alignment with market data, and equity among other team members with comparable experience. ‌ To ensure a successful onboarding experience, all new hires must work onsite at one of our offices during their first week of employment. Candidates should apply only if they are able to meet this requirement. ‌ Want to Learn More? [ Our Values ] [ Our Benefits ] [ Our Community Impact ] [ Our Leadership ]

Requirements

Must-haves

What You’ll Do
Cloud Security & Controls
Own, operate, and maintain cloud security capabilities, controls, guardrails, and platform settings across AWS and Azure environments
Monitor and improve Cloud Security Posture Management (CSPM) capabilities
Develop and maintain cloud security standards, baselines, and secure configuration guidance
Secure cloud identity and access, including privileged access, service accounts, roles, and secrets management
Support the onboarding of cloud accounts, subscriptions, and workloads to ensure alignment with security requirements
Evaluate cloud security technologies and support security tool integrations and optimization efforts
Develop automation using APIs, scripting, and cloud-native tooling to improve control validation, reporting, and security operations
Monitoring & Incident Response
Build and enhance cloud monitoring, alerting, and detection capabilities, including cloud telemetry within SIEM and security monitoring platforms
Investigate cloud security alerts, suspicious activity, and potential threats
Respond to cloud-related security incidents and support containment, remediation, and post-incident reviews
Develop and maintain cloud-focused incident response procedures and playbooks
Participate in daily security operations, including reviewing and resolving security-related tickets, alerts, requests, and escalations
Participate in the Infrastructure Security on-call rotation, including occasional weekend and after-hours work as required
Partnership & Risk Management
Participate in security architecture reviews and assess cloud designs for new technologies, services, and integrations
Partner with Enterprise Architecture, Infrastructure Engineering, Platform Engineering, Application Development, and Technology Operations to embed secure-by-design practices
Support audit, compliance, and regulatory activities by providing cloud control evidence and mapping controls to frameworks such as NIST CSF, SOC 2, and PCI DSS
Partner with Vulnerability Management to support patching, configuration hardening, and remediation of cloud vulnerabilities and misconfigurations
Collaborate with Infrastructure Security team members across Endpoint Security, Vulnerability Management, and AI Security
Serve as a cloud security subject matter expert and help strengthen the broader team through mentoring, knowledge sharing, and documented standards
What You ll Need

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazureaikubernetespython

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Professional Development