Senior Information Security Analyst (Cloud Security / GCP / Azure / AWS)
Job Description
The OperAxis team is seeking a Senior Information Security Analyst to support a leading healthcare insurer in Philadelphia, PA. This hybrid contract role is onsite 3 days a week, includes an in-person interview, and is open to local candidates only. You'll serve as a security subject-matter expert for business and technical teams and act as the customer interface for Information Security Operations. You'll evaluate, test, document and operationalize security controls across on-premises and multi-cloud environments (GCP, Azure, AWS), contribute to incident preparedness and response, and partner closely with audit teams, technology management and business stakeholders. The ideal candidate is a cloud security specialist with strong GCP experience, including Security Command Center and cloud security posture management (CSPM), plus a solid grounding in compliance frameworks such as HITRUST, HIPAA, PCI, NIST and SOC 2. Duration: 12–18+ months, contract Requirements • 5–8 years of information security experience (or 3–5 years in IT systems administration with strong security responsibilities) • Hands-on GCP cloud security experience, including Security Command Center and CSPM • Multi-cloud infrastructure experience across Azure, AWS, GCP and on-premises environments • Expertise in incident response, system monitoring/analysis and risk assessments • Knowledge of HITRUST, PCI, NIST, HIPAA and SOC 2 compliance requirements • Cloud migration experience and Palo Alto firewall experience • Experience with vulnerability assessments, penetration testing, change management and project management • Excellent communication, technical writing and presentation skills • Preferred: Proofpoint and Microsoft Defender for Office 365; CCSP, AZ-500, AWS Security Specialty or GCP Professional Cloud Security Engineer • Must be a U.S. citizen
Responsibilities
- Serve as security SME across Azure, AWS, GCP and on-premises environments
- Guide cloud security architecture, including IAM, encryption/key management, network controls and workload hardening
- Implement and monitor controls for suspicious activity across endpoints, networks and cloud platforms
- Perform log analysis, threat hunting and forensic investigations within SOC/IR workflows
- Plan and participate in incident response exercises and tabletop scenarios
- Draft and revise security policies, standards and procedures and remediate gaps against NIST standards
- Support internal/external auditors and maintain HITRUST, PCI, HIPAA and SOC 2 documentation
- Review contracts and support project scoping and cost-benefit analyses
- Communicate information security risk clearly to business and technical stakeholders
- Recommend security improvements and stay current on the evolving threat landscape