Cloud Security Analyst

Our Information Security & Compliance team is seeking interest for a Cloud Secuity Analyst. We are looking for a technically curious, detail-oriented security professional to help configure, monitor, and protect the cloud SaaS platforms our business runs on, including Salesforce, ServiceNow, Microsoft 365, and others. This person will own data security settings, build and tune monitoring and event detection, and lead the discovery and remediation of threats across some SaaS environments, while partnering with existing owners across other SaaS environments.

We work a hybrid model (3 days in the office and 2 days work from home); this position is located in our Minneapolis Metro headquarters.

This role is intentionally broad enough to cover multiple SaaS platforms over time. We are not looking for someone who is already an expert in every application we use. The right person has a solid security foundation, is comfortable learning unfamiliar platforms, and can become increasingly self-sufficient as they gain knowledge of our applications and environment.

Responsibilities

• Directly own data security across some cloud SaaS platforms and partner with other platform owners to ensure current best practices are implemented to secure each platform individually while collectively securing the entire corporate platform umbrella.

• Configure, harden, and maintain data security settings across cloud SaaS platforms and other business applications.

• Manage and review identity and access controls, including SSO, MFA, conditional access, role and permission models, sharing settings, and privileged accounts.

• Implement and maintain data protection controls such as data loss prevention (DLP), sensitivity labels, encryption settings, field-level security, and external sharing policies.

• Build, tune, and maintain monitoring, logging, and event detection for SaaS environments, including audit log collection, alert rules, and integration with SIEM and security tooling.

• Triage and investigate security alerts and suspicious activity, such as anomalous logins, data exfiltration, risky OAuth or third-party app connections, and unauthorized configuration changes.

• Proactively hunt for threats, misconfigurations, and posture drift using SaaS Security Posture Management (SSPM), CASB, native security consoles, and other tools.

• Lead remediation of identified threats and vulnerabilities, coordinating with platform owners, administrators, and IT teams to drive issues through to closure.

• Participate in security incident response for SaaS-related events, including containment, evidence collection, root-cause analysis, and post-incident follow-up.

• Identify repetitive manual work and create or improve scripts, automated detections, dashboards, playbooks, and workflows that reduce operational effort.