Description

Panalgo’ s mission is to improve healthcare and access to therapies through innovative analytics. Our team has built a next-generation analytics platform, Instant Health Data (IHD), to bring researchers together to generate insights into market access, improving population health, quality of care, and managing costs. You’ll work with an interdisciplinary staff from outcomes research, informatics, epidemiology, medicine, and software development backgrounds to further the company’s mission of improving healthcare through innovative data analytics.

We are seeking a skilled and experienced Cloud Security Analyst to join our team. As a Cloud Security Analyst, you will play a crucial role in ensuring the security and compliance of our cloud infrastructure. Your expertise in Linux and Windows system administration, along with proficiency in various security technologies, will be essential to safeguarding our organization's assets and data against potential security threats and vulnerabilities.

Responsibilities

Design, implement, and maintain robust security measures for our cloud infrastructure, with a focus on Linux and Windows systems within an AWS environment
Conduct comprehensive security assessments, vulnerability scans, and penetration tests using Nessus and other industry-leading tools to identify and remediate potential risks
Monitor and analyze system logs, security event data, and network traffic using advanced SIEM solutions like Splunk, ELK Stack (Elasticsearch, Logstash, Kibana), or QRadar to proactively detect and respond to security incidents, intrusions, and anomalies
Develop and enforce security policies, standards, and procedures for cloud-based systems, ensuring compliance with industry regulations and frameworks such as HITRUST CSF, PCI DSS, and NIST SP 800-53
Collaborate closely with cross-functional teams to implement and configure security controls and technologies, including next-generation firewalls (e.g., Palo Alto Networks, Fortinet), intrusion detection/prevention systems (e.g., OSSEC, Snort, Suricata), and secure web gateways (e.g., Zscaler, Cisco Umbrella)
Perform in-depth security reviews and risk assessments of third-party vendors and cloud service providers, evaluating their adherence to security standards and conducting comprehensive audits
Stay up to date with emerging cloud security trends, vulnerabilities, and advanced persistent threats (APTs) to proactively mitigate potential security risks
Provide expert guidance and support to internal teams on secure cloud architecture, configuration, and deployment practices, leveraging AWS services such as AWS WAF, AWS CloudHSM, and AWS Secrets Manager
Contribute to incident response activities, including investigating security breaches, applying forensic techniques, and collaborating with stakeholders to develop containment, recovery, and prevention strategies
Drive the development and implementation of security awareness and training programs to promote a culture of security awareness and ensure all employees understand their roles and responsibilities in maintaining a secure cloud environment

Requirements

Proficiency in Linux and Windows system administration, including installation, configuration, and troubleshooting in cloud environments
Strong understanding and practical experience in AWS cloud security services, including EC2, S3, IAM, VPC, CloudTrail, AWS Config, and AWS Security Hub
Experience with vulnerability assessment tools such as Nessus, and proficiency in conducting penetration testing and vulnerability management activities
In-depth knowledge of SIEM solutions like Splunk, ELK Stack (Elasticsearch, Logstash, Kibana), or QRadar for log analysis, correlation, and threat detection
Familiarity with network security technologies such as next-generation firewalls (Palo Alto Networks, Fortinet), intrusion detection/prevention systems (Snort, Suricata), and secure web gateways (Zscaler, Cisco Umbrella)
Understanding or exposure to security compliance frameworks and standards such as HITRUST CSF, PCI DSS, HIPAA, ISO 27001, and NIST SP 800-53 and how it maps to real-world tooling
Experience with encryption technologies, SSL/TLS protocols, secure network communication, and cryptographic concepts
Proficiency in scripting and automation using languages such as Python, PowerShell, or Bash for security-related tasks
Excellent problem-solving skills and the ability to work effectively in a dynamic, fast-paced environment
Strong written and verbal communication skills, with the ability to articulate complex security concepts to technical and non-technical stakeholders

Preferred Skills

Experience with other cloud platforms such as Microsoft Azure or Google Cloud Platform or private clouds
Knowledge of containerization technologies and security best practices (Docker, Kubernetes) and related tools like Twistlock or Aqua Security
Familiarity with DevOps principles and integrating security into CI/CD pipelines using tools like Jenkins, GitLab, or Azure DevOps
Certifications in relevant cloud security domains (e.g., AWS Certified Security Specialty, Certified Cloud Security Professional - CCSP)

Why be a Part of Panalgo

Leading healthcare data analytics/ big data company.
Work on a team of talented engineers and analysts.
Work to smooth patient access to critical therapies.
Strong corporate culture.
Great mentorship and professional growth opportunities.
Remote / Hybrid work opportunities

Benefits

The expected base salary for this position ranges from $150,000 to $250,000. It is not typical for offers to be made at or near the top of the range. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, licensure or certifications obtained. Market and organizational factors are also considered.

What We Offer You

Medical and prescription drug benefits
Health savings accounts or flexible spending accounts
Dental plans and vision benefits
Basic life and AD&D Benefits
401k retirement plan
Short and Long Term Disability
Education benefits
Paid parental leave
Unlimited paid time off

Panalgo provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Panalgo

New Jobs

Cloud Security Analyst