Cyber Security Analyst - Cloud, DevSecOps & AI Security

ISO New England is the independent system operator responsible for ensuring the safe and reliable flow of electricity in our region and planning for the future of the electric grid. We are at the forefront of New England’s ongoing transition to clean energy. ISO New England is seeking an experienced Cyber Security Analyst to support and enhance enterprise cloud security initiatives, with a primary focus on AWS and/or Microsoft Azure. This role will focus on identifying and addressing cloud security vulnerabilities, misconfigurations, access risks, and security control gaps. The successful candidate will collaborate with cloud engineering, application development, infrastructure, architecture, IAM, SOC, and other teams to strengthen security across enterprise cloud environments. Experience in AI security, DevSecOps, and regulated environments is an added advantage but is not required. What We Offer You A stable, mission-driven workplace where your impact truly matters A highly engaged work environment that values inclusion, collaboration, and employee safety and wellbeing Competitive compensation with a base salary + performance bonus Robust benefits package, including: Enhanced 401(k) and financial planning support Tuition reimbursement and professional development Wellness programs, including an onsite gym Flexible work hours Employee Business Networks Free coffee at our onsite café Hybrid work environment (3 days/week onsite) Distance-based relocation assistance available 5/6 person paid on-call rotation How you will make an Impact Conduct security assessments across AWS and/or Azure environments. Identify cloud security vulnerabilities, misconfigurations, excessive permissions, and security control gaps. Review cloud IAM, network security, workload security, data protection, logging, monitoring, and security configurations. Provide practical security recommendations and work with technical teams to remediate identified risks. Support cloud security posture management and ongoing monitoring of cloud environments. Review new cloud solutions, architectures, and technology changes and provide security guidance. Collaborate with application development, cloud engineering, infrastructure, enterprise architecture, IAM, network, SOC, and business teams to integrate security into projects and operational processes. Support vulnerability assessments, configuration reviews, remediation tracking, security monitoring, and compliance activities as needed. Support and maintain cloud and enterprise security technologies, including CNAPP/CSPM, CIEM, vulnerability management, EDR, SIEM, and related security tools. Monitor evolving cloud security threats, technologies, and industry best practices. What we are looking for Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent relevant professional experience. Relevant cybersecurity or cloud certifications are a plus but not required. 3+ years of cloud security engineering. Hands-on experience with AWS and/or Microsoft Azure. Understanding of cloud security concepts and controls, including: Identity and access management (IAM) Cloud security configurations Network and workload security Data protection Logging and monitoring Vulnerability and configuration management Experience identifying and helping remediate cloud security vulnerabilities and misconfigurations. Strong analytical and troubleshooting skills. Strong communication and cross-functional collaboration skills. Ability to work independently and manage multiple priorities. Desired not required 5-7 years of general cybersecurity experience is preferred. Experience supporting enterprise-scale AWS and/or Azure environments. Experience working collaboratively with cloud engineering, infrastructure, application development, architecture, IAM, and SOC teams. AI security knowledge or experience is considered an added advantage. AI Security, including generative AI, Large Language Models (LLMs), AI governance, AI risk management, or securing AI-enabled applications. Understanding of AI security risks such as prompt injection, sensitive-data leakage, insecure AI integrations, data/model poisoning, and model manipulation. DevSecOps and CI/CD pipeline security. NERC CIP or other regulated-environment security experience. Familiarity with security frameworks and industry best practices. This employer will not sponsor applicants for work visas for this position (ex: H-1B, F-1/CPT/OPT, O-1, E-3, TN, J, etc.). The expected salary range for this position is $127,000 - $150,000 per year. This role is also eligible for an annual performance bonus, comprehensive health insurance (medical, dental and vision), flexible spending and health savings accounts, a 401(k) plan with generous employer contributions and a student debt benefit, life and AD&D insurance, disability insurance, critical illness and hospital indemnity benefits, paid time off, paid leave, a wellness program, an employee assistance program and other great company perks. This is a U.S. based role. If the successful candidate resides outside of the U.S., relocation will be required. Equal Opportunity: We are proud to be an EEO employer. Applicants for employment are considered without regard to race, color, religion, creed, sex (including pregnancy, childbirth, and related medical conditions), gender identity or expression, sexual orientation, citizenship, national origin, age, ancestry, marital status, disability (including learning, mental, intellectual, and physical), service in the uniformed services, genetic information, or any other status protected by applicable law. Drug Free Environment: We maintain a drug-free workplace and perform pre-employment substance abuse testing.