Note: The job is a remote job and is open to candidates in USA. Grant Leading Technology is seeking a candidate for Senior Cloud Cybersecurity Analyst to join our dynamic team. The candidate will play a critical role in securing the Internal Revenue Service's next-generation Enterprise Data Platform (EDP) as part of the IRS modernization initiative, supporting the design, implementation, assessment, and continuous monitoring of cloud-native security controls.
Responsibilities
- Design, implement, and maintain security controls across cloud environments including AWS, Azure, and hybrid cloud architectures
- Evaluate cloud services and architectures against federal cybersecurity standards and IRS security requirements
- Support secure migration of legacy data platforms and applications into modern cloud environments
- Implement Zero Trust Architecture (ZTA) principles and cloud-native security capabilities
- Ensure compliance with federal mandates including:
- FISMA
- NIST Risk Management Framework (RMF)
- NIST SP 800-53 Rev. 5
- NIST SP 800-207 (Zero Trust)
- FedRAMP
- IRS Publication 1075
- Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and Authority to Operate (ATO) documentation
- Support security control assessments and continuous authorization activities
- Monitor and analyze cloud security events, logs, and alerts
- Investigate cybersecurity incidents and coordinate response activities
- Implement and optimize cloud security monitoring solutions, SIEM integrations, and threat detection capabilities
- Conduct vulnerability assessments, security reviews, and remediation tracking
- Develop strategies for protecting sensitive taxpayer and financial information
- Implement encryption, tokenization, data masking, and key management solutions
- Ensure secure data ingestion, storage, processing, and sharing across enterprise data environments
- Support data governance and privacy requirements
- Embed security controls into CI/CD pipelines and Infrastructure-as-Code (IaC) deployments
- Automate security testing, compliance validation, and vulnerability management processes
- Collaborate with development and engineering teams to implement secure coding and deployment practices
Skills
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field
- Minimum of eight (8) years of cybersecurity experience
- Minimum of five (5) years securing cloud environments supporting federal or highly regulated organizations
- Strong understanding of cloud-native security services and architectures
- Experience with vulnerability management, security assessments, and incident response
- Experience with enterprise logging, SIEM, and cloud security monitoring tools
- Strong written and verbal communication skills
- AWS Security Services (IAM, GuardDuty, Security Hub, KMS, CloudTrail)
- Microsoft Azure Security Services (Defender for Cloud, Sentinel, Key Vault)
- Cloud Access Security Broker (CASB) technologies
- Identity and Access Management (IAM)
- Multi-Factor Authentication (MFA)
- Security Information and Event Management (SIEM)
- Infrastructure as Code (Terraform, CloudFormation, ARM/Bicep)
- Container Security (Docker, Kubernetes)
- DevSecOps tools and practices
- Vulnerability Management Platforms
- Data Loss Prevention (DLP)
- Encryption and Key Management Systems
- Must be able to pass a Minimum Background Investigation (MBI) background check
- Must live in the United States and be authorized to work in the United States
- Experience supporting IRS, Treasury, or other federal civilian agencies
- Experience securing large-scale enterprise data lakes, data warehouses, or analytics platforms
- Experience with AI/ML security and governance frameworks
- Experience implementing Zero Trust Architecture in cloud environments
- Knowledge of taxpayer data protection requirements and IRS Publication 1075 controls
- One or more of the following certifications:
- CISSP (Certified Information Systems Security Professional)
- CCSP (Certified Cloud Security Professional)
- AWS Certified Security – Specialty
- AWS Solutions Architect Professional
- Microsoft Certified: Azure Security Engineer Associate
- Certified Information Security Manager (CISM)
- Certified Information Systems Auditor (CISA)
- GIAC Cloud Security Certifications
- Certified Authorization Professional (CAP)
Benefits
- Our base healthcare plan is 100% employer paid
- Our 401k plan is immediately vested
- We also offer paid time off
- 11 federal holidays
- Short/long-term disability
- 401k matching
- Opportunities for professional development
Company Overview