Cloud Security Analyst

Kiewit Corporation is seeking a Cloud Security Analyst in Omaha, NE (onsite). This role supports cloud risk reduction end to end by working alongside infrastructure, application development, and DevOps teams. You will help validate cloud findings, translate them into actionable remediation, and strengthen security practices across the cloud resource and application lifecycle.

Reporting to the team manager, you will focus on identifying misconfigurations, excessive permissions, exposed services, and insecure configurations, then use enrichment and context to help teams prioritize what matters most. The position is based out of the office at 12312 Port Grace Blvd, La Vista, NE 68128 and is not remote or hybrid.

Responsibilities

• Review and validate findings from CNAPP and other security tools, including misconfigurations, excessive permissions, exposed services, and insecure configurations.
• Assess vulnerabilities across cloud workloads, virtual machines, containers, and application dependencies.
• Prioritize findings using exploitability, exposure, business impact, and available runtime context rather than severity scores alone.
• Identify internet-facing cloud assets and unintended exposures, confirm ownership, and help maintain accurate asset and assessment coverage.
• Convert findings into clear, actionable work items for infrastructure and development teams.
• Track remediation progress, escalate blockers, verify fixes, and document exceptions for approval.
• Assist with investigations involving code, dependency, secret, container image, and infrastructure-as-code findings.
• Support security controls within source repositories and CI/CD pipelines.
• Participate in cloud design reviews for identity, networking, data protection, logging, and workload security.
• Help teams apply approved patterns and least-privilege principles.
• Use scripts, APIs, and queries to improve finding enrichment, reporting, and remediation workflows.
• Track coverage, outstanding risk, remediation timeliness, and recurring issues.
• Assess whether emerging vulnerabilities or threats affect cloud resources and provide technical context to incident response teams when needed.

Requirements

• Foundational knowledge of cloud services and the shared responsibility model, with practical exposure to Azure, AWS, or another major cloud platform.
• Understanding of core security concepts including least privilege, authentication and authorization, vulnerability management, encryption, and secure configuration.
• Working knowledge of networking fundamentals such as TCP/IP, DNS, HTTP/S, firewalls, routing, and public versus private connectivity.
• Familiarity with Windows or Linux administration and the ability to investigate configuration and security findings using documentation, logs, and command-line tools.
• Basic scripting or query skills (PowerShell, Python, Bash, or KQL) and willingness to build automation skills.
• Ability to distinguish tool-generated alerts from validated risk, and to document evidence, impact, and recommended corrective actions.
• Strong communication, organization, and follow-through, with the ability to collaborate with technical teams and manage assigned findings through resolution.
• Relevant experience through employment, internships, coursework, labs, military service, or personal projects.
• Approximately 0–3 years of related experience; demonstrated skills matter more than a fixed tenure or degree requirement.

Technologies

• Azure, AWS, PowerShell, Python, Bash, KQL
• CNAPP
• TCP/IP, DNS, HTTP/S
• CI/CD, GitHub, Azure DevOps
• Kubernetes
• SAST, software composition analysis, CIS benchmarks, OWASP

Benefits

• Comprehensive benefits package
• Top-tier medical, dental and vision plans covering eligible employees and dependents
• Voluntary wellness and employee assistance programs
• Life insurance
• Disability
• Retirement plans with matching
• Generous paid time off

Other Requirements

• Regular, reliable attendance
• Work productively and meet deadlines timely
• Communicate and interact effectively and professionally with supervisors, employees, and others in an individual or team environment
• Perform work safely and effectively, following oral and written instructions and all relevant policies
• Work during normal operating hours to organize and complete work within given deadlines; overtime and weekends as required

Preferred Qualifications

• Experience with cloud security posture management, CNAPP, vulnerability scanning, or attack surface management tools
• Familiarity with cloud IAM, service identities, secrets management, network segmentation, and cloud security logging
• Exposure to GitHub or Azure DevOps, CI/CD pipelines, infrastructure as code, containers, or Kubernetes
• Understanding of common application security risks and tools such as SAST, software composition analysis, and secret scanning
• Familiarity with CIS benchmarks, OWASP guidance, or comparable security standards
• Relevant foundational cloud or security certifications, such as Security+, AZ-900, or SC-900, or equivalent practical knowledge