> Markdown version of [/jobs/ext/2880811-cloud-forensics-analyst-dt-9-remote](https://www.wearedevelopers.com/jobs/ext/2880811-cloud-forensics-analyst-dt-9-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Forensics Analyst - DT #9 - Remote

- **Company:** Compu-Vision - IT
- **Location:** Philadelphia, PA, United States (Remote available)
- **Contract:** Temporary to permanent
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Identity and Access Management, Python (Programming Language), Cloud Services, Security Information and Event Management, VMware Infrastructure, Data Logging, Scripting, Google Cloud, Cloud Platform System, Cyber Threat Analysis, Containerization, Kubernetes, Cybercrime, ArcSight Event Correlation, Terraform
- **Published:** September 13, 2026
- **Apply:** https://www.careerjet.com/jobad/use15a89292f947919508927d95bda923b

## About the Role

* Proven experience in cloud forensics, cloud security, or cloud incident response.
 * Hands-on experience investigating security incidents within AWS, Azure, and/or GCP.
 * Strong understanding of cloud logging, auditing, identity, access management, and network activity.
 * Experience investigating compromised cloud accounts and unauthorized access.
 * Experience collecting and analyzing forensic evidence from cloud workloads.
 * Strong understanding of cloud IAM and privilege escalation risks.
 * Experience with Kubernetes and/or container forensics.
 * Familiarity with SIEM platforms and security-event correlation.
 * Experience with Python or similar scripting languages for investigation and automation.
 * Working knowledge of Terraform and infrastructure-as-code concepts.
 * Strong understanding of incident response and threat-hunting methodologies.
 * Excellent analytical, documentation, and communication skills.
 * Ability to work independently in a remote environment.

## Description

We are seeking an experienced Cloud Forensics Analyst to conduct forensic investigations across cloud environments, including AWS, Microsoft Azure, and Google Cloud Platform (GCP).
The role will focus on investigating compromised cloud accounts, unauthorized access, suspicious activity, and security incidents across cloud infrastructure. The ideal candidate will have hands-on experience with cloud logging, IAM analysis, workload forensics, container/Kubernetes environments, SIEM platforms, and cloud incident response.
Key Responsibilities

 * Conduct forensic investigations across AWS, Azure, and/or GCP environments.
 * Analyze cloud-based:

 * Audit and security logs
 * Identity and access activity
 * Storage resources
 * Compute instances
 * Network activity
 * Investigate compromised cloud accounts, unauthorized access, and suspicious identity activity.
 * Perform forensic collection from cloud workloads and virtual infrastructure.
 * Analyze cloud IAM activity and identify potential privilege escalation and attack paths.
 * Investigate cloud-native security events and indicators of compromise.
 * Perform forensic analysis of Kubernetes and containerized environments.
 * Correlate cloud telemetry with SIEM and other security data sources.
 * Support cloud incident response and threat hunting activities.
 * Develop incident timelines and document investigative findings.
 * Provide recommendations for containment, remediation, and improved cloud security controls.
 * Prepare clear technical reports and communicate findings to security and infrastructure teams.

Key Technical Skills
Cloud Platforms

 * AWS
 * Microsoft Azure
 * Google Cloud Platform (GCP)

Cloud Security & Logging

 * AWS CloudTrail
 * AWS GuardDuty
 * Microsoft Defender for Cloud
 * Azure Activity Logs
 * Cloud IAM / Identity and Access Management
 * Cloud audit and security logging

Cloud & Container Forensics

 * Cloud workload forensic collection
 * Compute and storage forensics
 * Kubernetes forensics
 * Container forensics
 * Cloud attack-path analysis
 * Identity and privilege analysis

Security & Automation

 * SIEM platforms
 * Python
 * Terraform
 * Incident response
 * Threat hunting


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)