Responsibilities
Berkley Technology Services is seeking a CTEM Cloud and Hardening Analyst to join their team in our Wilmington DE office.
The CTEM Cloud and Hardening Analyst within the Exposure Management organization is responsible for securing and governing an expanding multi-cloud footprint and shaping how BTS measures and improves its global cloud security posture. This role operates at the intersection of cloud engineering, vulnerability management, and regulatory compliance.
• Operate and tune the cloud security posture management platform to continuously assess on-premises (Windows and *Nix), AWS, and Azure environments against approved configuration baselines and industry benchmarks.• Translate regulatory and internal control requirements into enforceable configuration standards for both cloud and on-premise environments, and maintain mapping between technical controls and frameworks such as NIST and CIS.• Validate and risk-rank findings using business context, drive remediation to closure with cloud platform and application teams, and administer the exception and risk-acceptance process.• Codify controls as preventive guardrails and shift detection into infrastructure-as-code and CI/CD pipelines, automating recurring assessment and evidence collection wherever possible.• Provide clear reporting on control coverage, remediation SLAs, and residual risk to global engineering, business operating units, security management, and senior leadership teams.
Qualifications
Qualifications:
• Minimum of 5+ years in Information Security, IT audit, cloud security, or a related field, with demonstrated focus on cloud compliance and configuration risk.• Hands-on working knowledge of at least one major cloud provider (e.g., AWS, Azure), including identity and access management, network architecture, logging, encryption, and key management.• Proven experience mapping technical controls to recognized frameworks and supporting a formal audit or assessment cycle from evidence gathering through issue closure.• Certifications such as CCSK, CCSP, CISA, CISSP, or a cloud provider security specialty certification are preferred.• Proven ability to explain findings and secure remediation commitments from business, technical, and executive stakeholders.• Demonstrated comfort using AI-assisted tools in a professional context and approaching AI as a standard part of modern workflow.• Skilled in cloud security posture management and compliance scanning tools, such as Wiz, Prisma Cloud, Microsoft Defender for Cloud, and AWS Security Hub.• Experience with standard operating systems.
Education Requirement
• Bachelor’s degree in Computer Science, Information Security, Network Engineering, or a related technical discipline, or equivalent experience.
Additional RequirementsLocation and Travel: • Primary location Wilmington, DE.
Sponsorship DetailsSponsorship not Offered for this Role
