> Markdown version of [/jobs/ext/2504367-sr-it-security-analyst](https://www.wearedevelopers.com/jobs/ext/2504367-sr-it-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. IT Security Analyst - **Company:** AEO Management Co. - **Location:** Pittsburgh, PA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Active Directory, Artificial Intelligence, Amazon Web Services, Systems Engineering, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Information Leak Prevention, DevOps, Infrastructure as a Service (IaaS), Identity and Access Management, Intrusion Detection and Prevention, Network Security, Microsoft Office, Routing, Platform as a Service (PAAS), Azure Active Directory, Cloud Services, Tensorflow, Phishing, Security Software, Security Information and Event Management, Data Logging, Scripting, Google Cloud, Load Balancing, Cloud Platform System, Firewalls (Computer Science), Cloudformation, Kubernetes, Data Analytics, Malware Detection, Gsuite, CIS Benchmarks, Terraform, Azure Resource Manager, Security Orchestration, Automation & Response - **Published:** August 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2266b496b51fee14 ## About the Role * Bachelor's degree or equivalent work experience required. * Five years of enterprise cloud (IaaS, PaaS, SaaS) experience, IT cloud security experience preferred. * Experience with Endpoint Detection and Response and Identity Protection. * Experience with data loss prevention tools including implementations for endpoint and cloud environments. * Experience with deception technologies including design, implementation and management. * Experience with cloud security posture management (CSPM) and cloud workload protection (CWP) tools. * Experience with Google Cloud Org Policies and/or Azure Policy and/or AWS Service Control Policies. * Deep knowledge regarding clouding networking, such as routing, traffic filtering (firewalls), load balancing, etc… for GCP VPCs and/or Azure VNETs and/or AWS VPCs. * Experience with container security including actual container workloads and Kubernetes engine. * Experience working IaC, such as Terraform and/or Azure Resource Manager templates and/or AWS CloudFormation Stacks. * Experience in hardening Google Workspace tenants. * Experience with Microsoft Active Directory, Azure AD and other cloud identity technologies. * Strong ability to critical think and solve problems. * Experience with threat detection and incident response in cloud and on premise environments. * Advise stakeholders and translate business requirements into secure, scalable, and reliable cloud solutions. * Complete security reviews and assessments with developers, operations, and infrastructure teams. * Partner with system engineering / DevOps to assess and reduce cloud security risks. * Assist with documentation of organizational security standards, processes, and governance model. * Knowledge of host hardening, auditing, logging, monitoring, network security, and anomaly detections. * Understanding of industry trends for cybersecurity risk & threat intelligence, and governance. * Assist with implementation and improvements of Cloud Security Operations capabilities within existing organizational support structure. * Assist with configuration of sending cloud logs to SIEM tool and creating rules for alerting on suspicious events. Nice to Have: * Proficiency in ML frameworks, data analytics, and automation scripting. * Ability to interpret AI findings and conduct proactive threat hunting. * Understanding of AI risk frameworks (e.g., NIST AI RMF, ISO 42001). * Specialized in defending against AI-powered threats, such as deepfakes and advanced phishing. * Familiarity with Next Generation SIEM platforms. * Application Security Testing tools including static, dynamic, interactive and software composition analysis. * IT Security certifications, such as CISSP, GIAC, etc. are preferred. * Direct hands-on experience designing and implementing security with Google Cloud Platform and/or Microsoft Azure and/or AWS for both IaaS and PaaS offerings. * Cloud certifications, such as CCSP, AWS CSA, Google Cloud Professional, Microsoft's Azure Solutions Architect is preferred. * Experience with DevOps and CI/CD tooling. * Experience in hardening Microsoft Office 365 tenants. * Knowledgeable with CSA CCM security framework and CIS Benchmarks for Cloud. ## Description Our Senior IT Security Analyst, within the Security Operations group, ensures proper configuration standards are met and sustained in compliance with security policy, procedures, standards, and industry requirements/best practices. You will have the opportunity to implement and maintain cybersecurity controls including endpoint detection and response, identity protection, data loss prevention, security automation, application security testing, next generation firewalls, container security and automated compliance tools. Additionally, you will get to perform cybersecurity monitoring of American Eagle Outfitter's cloud environments ensuring proper monitoring coverage that correlates with internal security operations and processes. If you want to focus on building secure solutions in a dynamic retail environment and are passionate about using your analytical skills to solve meaningful problems, AEO has a phenomenal opportunity for you. What You'll Do: * Configure, implement, monitor and support cybersecurity systems and controls supporting. * Configure security tools for logging /monitoring, and growing coverage of existing tools. * Make recommendations to management on enhancements to existing and new security software or related tools. * Assist in evaluating, planning and implementation of new/existing security applications/tools that integrate with current toolsets. * Help implement and maintain next-generation enterprise protection tools malware detection technologies. * Ensure security standard methodologies are identified and integrated into all facets of projects including network, system designs/configuration, and implementations. * Identify and recommend potential areas where existing data security policies and procedures require change, or where a supplement is required to mitigate key security risks. * Partner with various business units to enhance security policies/procedures. * Create and maintain data security documentation, policies, and procedures. * Configure, implement, monitor, and support network security software/systems that will help ensure compliance with CSA Cloud Controls Matrix in cloud environment. * Responsible for providing support during off hours for security. * All other duties as assigned. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) ## Related Articles - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)