Cloud Security Analyst

What we do

At Kenvue, we realize the extraordinary power of everyday care. Built on over a century of heritage and rooted in science, we’re the house of iconic brands - including NEUTROGENA®, AVEENO®, TYLENOL®, LISTERINE®, JOHNSON’S® and BAND-AID® that you already know and love. Science is our passion; care is our talent.

Who We Are

Our global team is ~ 22,000 brilliant people with a workplace culture where every voice matters, and every contribution is appreciated. We are passionate about insights, innovation and committed to delivering the best products to our customers. With expertise and empathy, being a Kenvuer means having the power to impact millions of people every day. We put people first, care fiercely, earn trust with science and solve with courage – and have brilliant opportunities waiting for you! Join us in shaping our future–and yours.

Role reports to:

Location:

Work Location:

What you will do

Job Summary

We are seeking a Cloud Security Analyst with hands-on experience in Azure and AWS to support our Cloud Security Posture Management (CSPM) operations and develop automation to strengthen our cloud security capabilities. The ideal candidate has a strong technical foundation in cloud infrastructure, security controls, and scripting, and thrives in a fast-paced, collaborative environment.

In this role, you will help monitor, assess, and improve cloud security posture; automate routine security tasks; and work closely with engineering, DevSecOps, business application owners, and architecture teams to ensure secure and resilient cloud environments across the enterprise.

Key Responsibilities

Cloud Security Operations

• Support the day-to-day operation and maintenance of the Cloud Security Posture Management (CSPM) platform, resolving system health issues, and ensuring continuous visibility into Kenvue’s Azure and AWS environments.

• Analyze and triage alerts, misconfigurations, and vulnerabilities identified by CSPM tools.

• Collaborate with application and infrastructure teams to validate findings, make recommendations based on security best practices, and track issue resolution.

• Participate in the review and testing of cloud security controls and policies.

• Monitor cloud environments for compliance with established security standards and best practices.

Security Automation & Engineering Support

• Develop and maintain automation scripts and integrations using Python, PowerShell, or Terraform to streamline security tasks and reporting.

• Assist in automating security control enforcement, compliance checks, and remediation workflows.

• Support integration of CSPM data with enterprise tools such as ServiceNow, Torq, or Sentinel for centralized monitoring and response.

• Contribute to continuous improvement of cloud security operations through tool optimization and process automation.

Collaboration & Continuous Improvement

• Work closely with Cloud Engineering, DevSecOps, and Security Architecture teams to ensure security is embedded in system design and operations.

• Participate in cloud security reviews, risk assessments, and audits.

• Research and evaluate new security features and technologies relevant to cloud posture management and automation.

• Maintain documentation of cloud security processes, standards, and procedures.

Incident Support & Compliance

• Support incident response activities involving cloud environments, including investigation, root-cause analysis, and corrective action planning.

• Assist with internal and external audits by providing evidence of cloud security controls and posture.

• Help ensure cloud environments meet compliance frameworks such as CIS, NIST, ISO, or internal enterprise standards.

Qualifications – Required

• Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent experience.

• 4–5 years of professional experience in cloud or cybersecurity engineering, including at least 2 years focused on cloud security.

• Hands-on experience with Azure and AWS security services, configurations, and policies.

• Experience using or administering Cloud Security Posture Management (CSPM) platforms (e.g., Wiz, Prisma Cloud, Defender for Cloud).

• Strong scripting or automation skills using Python, PowerShell, or Terraform.

• Familiarity with Zero Trust principles, IAM policies, and network segmentation in cloud environments.

• Working knowledge of Agile or DevOps environments.

• Strong analytical, troubleshooting, and problem-solving skills.

• Excellent communication and collaboration skills; ability to work effectively across distributed teams.

Qualifications – Extra Credit

• Working knowledge of with containerization and orchestration tools like Kubernetes and Docker, along with an understanding of container security concepts.

• Certifications: AWS Certified Security – Specialty, Azure Security Engineer Associate, or equivalent.

• Experience in regulated environments (e.g., SOX, HIPAA, or FedRAMP).

• Familiarity with container security, CI/CD pipeline integrations, or infrastructure as code security practices.

• Experience integrating CSPM tools with SIEM, SOAR, or ITSM platforms.

• Understanding of CIS Benchmarks, NIST 800-53, or ISO 27001 standards.

If you are an individual with a disability, please check our Disability Assistance page for information on how to request an accommodation.