Back to jobs

Cloud Application Security Analyst

Washington, DC

Akumen, Inc. is seeking an experienced Cloud Application Security Analyst to support the security of mission-critical web, mobile, API, and cloud-based applications. This role partners with software engineering, DevOps, quality assurance, infrastructure, and cybersecurity teams to identify vulnerabilities, integrate security controls into the software development lifecycle, and strengthen secure engineering practices across the organization. 

Position Overview:

The Cloud Application Security Analyst performs application security testing, secure design and code reviews, vulnerability triage, threat modeling, and cloud security configuration support. The successful candidate will apply Zero Trust and defense-in-depth principles, automate security validation within CI/CD pipelines, and help development teams remediate application and cloud security risks before production deployment. 

Key Responsibilities:

  • Perform static application security testing (SAST), dynamic application security testing (DAST), and targeted manual security reviews for web and mobile applications.
  • Review source code, APIs, application architectures, and cloud designs to identify security weaknesses before production release.
  • Triage, prioritize, document, and support remediation of vulnerabilities, including issues aligned with the OWASP Top 10.
  • Integrate automated security scanning and validation into CI/CD pipelines using platforms such as GitHub, GitLab, or Jenkins.
  • Conduct threat modeling for new features, applications, APIs, and microservices, and maintain supporting security evidence and diagrams.
  • Protect public-facing applications, internal services, APIs, and cloud resources through appropriate network security controls, segmentation, traffic inspection, and secure configuration.
  • Deploy and manage cloud networking and security controls using Terraform, Bicep, ARM templates, or comparable Infrastructure as Code tools.
  • Maintain repeatable secure configuration templates, technical baselines, controlled changes, and automated validation procedures.
  • Partner with application, cloud, infrastructure, QA, and engineering teams to eliminate unnecessary exposure and overly permissive configurations.
  • Research emerging application-layer and cloud threats, update internal security guidance, and promote secure coding and DevSecOps practices. 

Minimum Qualifications:

  • Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, a related discipline, or equivalent relevant experience.
  • At least three years of experience in network engineering, cloud networking, network security, application security, or cloud security infrastructure support.
  • Demonstrated knowledge of the OWASP Top 10, web application architecture, HTTP, APIs, REST, and GraphQL.
  • Hands-on experience with SAST/DAST tools, vulnerability triage, manual code review, and secure SDLC or CI/CD workflows.
  • Working knowledge of at least one programming or scripting language, such as Python, JavaScript, Java, or C#, with strong analytical, troubleshooting, communication, and cross-functional collaboration skills. 

Preferred Qualifications:

  • Hands-on experience securing cloud environments in Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
  • Experience with container and orchestration security, including Docker and Kubernetes.
  • Experience using Infrastructure as Code tools such as Terraform, Bicep, or ARM templates to deploy and validate security controls.
  • Experience configuring enterprise or cloud-native firewalls, integrating third-party network security appliances, and troubleshooting complex cloud connectivity, application, firewall, and API issues.
  • Relevant certifications such as Certified Secure Software Lifecycle Professional (CSSLP), CompTIA Security+, or an ethical hacking certification. 

Clearance Requirement:

  • Active Secret security clearance or higher.

Salary Range:

  • Minimum $115,000 - Maximum $135,000 annually

 

 

The salary range listed for this position reflects Akumen, Inc.'s current estimate of the expected compensation for this role at the time of posting. Actual compensation may vary based on a variety of factors, including a candidate's experience, education, certifications, technical skills, security clearance status, geographic location, and alignment with contract, labor category, and customer requirements. Compensation decisions may also be influenced by contract award status and available funding.

Akumen, Inc. is an equal employment opportunity employer. All employment decisions are made based on qualifications, merit, and business needs, and without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. We are committed to a respectful and inclusive workplace where all individuals have the opportunity to succeed. Akumen, Inc. maintains a drug-free workplace consistent with applicable local, state, and federal laws.

Apply for this job

*

indicates a required field

Resume/CV

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Akumen, Inc.’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...