OSOC Security Analyst - Cloud Pentesting

Evolve Security is looking for an OSOC Security Analyst to join our growing team. This position will assist with the overall successful delivery of various application vulnerability assessments, continuous internal / external penetration assessments, cloud security assessments, incident response and detection assessments, and other types of security strategy and architecture reviews.

Responsibilities include:

• Conduct hands-on cloud penetration testing across Azure, AWS, and GCP environments, identifying IAM misconfigurations, excessive permissions, privilege escalation paths, exposed storage buckets/blobs, and exploitable service misconfigurations
• Perform offensive enumeration and attack-path mapping against cloud environments using tools such as ScoutSuite, Prowler, Pacu, ROADtools/ADRecon, and GCP-focused tooling.
• Review eASM dashboard daily to monitor for any anomalies or security incidents.
• Conduct testing and validation of vulnerabilities identified by the ASM system, providing evidence of validation to support remediation efforts.
• Investigate eASM vulnerabilities thoroughly, analyzing potential impact and root causes.
• Conduct various types of penetration testing, including scanning and password attacks, to identify potential weaknesses in the system.
• Perform cloud penetration testing and security configuration reviews across Azure and AWS environments, identifying misconfigurations, ex