Cloud Security Analyst II

About this role

A career that’s the whole package!

At Conga, we’ve built a community where our colleagues can thrive. Here you’ll find opportunities to innovate and support growth through individual and team development, all within an environment where every voice is heard.

Conga lines up commercial operations so companies run as connected, smarter businesses. By unifying the people and processes that drive commerce, Conga aligns pricing, quoting, contracting, rebates, and communications so teams stay in sync and buyers keep moving forward. The result is trusted decisions, consistent buyer experiences, and profitable growth. More than 10,000 customers worldwide, including over 50% of the Fortune 100®, trust Conga when commercial complexity is high and global impact is on the line.

Job Title: Cloud Security Analyst II Location: Boston, MA, Houston, TX, Reports to: Manager, Security Enablement, Applications, and Services (SEAS)

A quick snapshot…

As a Cloud Security Analyst II at Conga, you will play a critical role in protecting our cloud ecosystem, applications, and services through vulnerability management, cloud security operations, automation, and emerging AI-enabled security capabilities.

This role is designed for an early-career security professional who has already demonstrated hands-on experience through internships, co-ops, research projects, or practical security work. You'll move quickly beyond observation into ownership, helping manage real vulnerabilities, support security operations, automate workflows, and contribute to AI-driven security initiatives that improve efficiency and strengthen our security posture.

Working as part of Conga's Security Enablement, Applications, and Services (SEAS) team, you'll partner closely with security engineers, platform teams, and business stakeholders to identify risks, improve visibility, and help secure critical cloud infrastructure and services.

This is not simply a ticket-processing role. It's an opportunity to build foundational expertise in enterprise cloud security while helping shape the future of intelligent security operations through automation and agentic AI.

Why it's a big deal…

Modern organizations operate across increasingly complex cloud environments where security teams must rapidly identify, prioritize, and remediate risks while enabling business growth and innovation.

As a Cloud Security Analyst II, you'll help ensure Conga maintains a strong security posture across its cloud platforms, applications, and services. Your work will directly impact vulnerability reduction, operational resilience, risk management, and security automation initiatives.

You'll gain hands-on experience with cloud security technologies, vulnerability management programs, AI-assisted security operations, and enterprise-scale automation while contributing to a team responsible for protecting critical business systems and customer data.

The work you do will help transform how security teams leverage automation and AI to scale security operations and reduce operational burden.

What you'll lead…

Vulnerability Management

• Run and maintain credentialed vulnerability scans across cloud, infrastructure, and containerized environments.

• Validate findings, assess risk severity, and prioritize remediation efforts using industry frameworks such as CVSS and CISA Known Exploited Vulnerabilities (KEV).

• Route findings to appropriate engineering teams and track remediation progress against established service level agreements.

• Document vulnerabilities, business impact, and remediation guidance clearly for technical teams and auditors.

• Support security exception and risk acceptance processes by gathering evidence and documenting compensating controls.

Cloud Security Fundamentals

• Monitor cloud environments for security configuration drift and compliance against internal security standards.

• Support Infrastructure-as-Code security reviews for security-owned resources under the guidance of senior security engineers.

• Assist with the administration and operation of security technologies, including CNAPP, WAF, DNS security, Zero Trust, and related services.

• Evaluate cloud configurations using core security principles such as encryption, access controls, and data protection.

• Apply threat modeling concepts to identify risks, detection opportunities, and response requirements for new infrastructure and services.

Automation & AI-Enabled Security

• Develop automation scripts and workflows using Python, Bash, or similar technologies to reduce manual security work.

• Leverage AI-assisted security tooling to improve vulnerability triage, analysis, and enrichment activities.

• Contribute to the development of internal automation frameworks, reusable security workflows, and AI agent capabilities.

• Design, build, deploy, and maintain AI agents that integrate with cloud platforms, ticketing systems, security tools, and operational processes.

• Validate agent outputs and workflows to ensure reliability, accuracy, auditability, and business alignment.

• Monitor and continuously improve deployed automation and AI solutions as systems and business processes evolve.

• Build dashboards, reports, and security metrics that provide visibility into risks, remediation progress, and operational effectiveness.

Incident Response Support

• Assist with security investigations by collecting logs, gathering evidence, documenting findings, and supporting forensic analysis efforts.

• Collaborate with senior incident responders during active security events and post-incident reviews.

• Contribute to security documentation and lessons learned that improve detection and response capabilities.

Cross-Functional Collaboration & Business Impact

• Partner with Engineering, Infrastructure, Cloud Operations, Compliance, and Product teams to improve security outcomes.

• Support security initiatives that reduce risk while enabling business growth and operational efficiency.

Similar jobs

• Cybersecurity Risk Analyst II — Clear · New York, New York, United States
• Cybersecurity SOC Analyst II — Chaosindustries · San Francisco, California, United States
• Cybersecurity SOC Analyst II — Chaosindustries · El Segundo, California, United States
• Cybersecurity SOC Analyst II — Chaosindustries · Washington, District of Columbia, United States
• Cloud Cybersecurity Analyst — Darkwolfsolutions · Washington DC Metro Area
• Senior Security Analyst I — Digitalocean98 · Seattle
• Senior Security Analyst I — Digitalocean98 · Remote
• Senior Security Engineer II, Cloud Security — Coreweave · Livingston, NJ / New York, NY / Sunnyvale, CA / Bellevue, WA