CTEM Cloud and Hardening Analyst

Job description

Company Details Company URL

https://berkleytechnologyservices.com/ W.R. Berkley Corporation is comprised of 60+ businesses alongside Berkley Technology Services (BTS) and other shared services groups. Here at Berkley Technology Services, the core of our success is our people. Our teams bring their own unique perspective and experiences which enables us to translate the needs of our business to deliver adaptable, secure solutions while providing an unmatched user-focused experience.

Our tagline “Thoughtful Minds | Empowering Possibilities” was crafted with our own teams in mind. At BTS, our teams thrive in Berkley’s decentralized model - leveraging the power of being part of a long standing, heritage brand with extensive expertise while innovation and being entrepreneurial is encouraged. Internally, we operate as a relatively flat organization valuing communication and feedback. We pride ourselves in an open-door policy where no one is treated differently based on title, fostering a culture of trust, transparency, and engagement.

Mission (what we stand for)

We Believe in the value of every voice, Translate needs into capabilities, & Secure the future of Berkley.

Vision (where we’re going)

Be the foundation of Berkley through adaptable solutions, resilient environments, and an unmatched experience. Come join us as we push forward into the future of industry leading technological solutions.

Responsibilities

Berkley Technology Services is seeking a CTEM Cloud and Hardening Analyst to join their team in our Wilmington DE office. The CTEM Cloud and Hardening Analyst within the Exposure Management organization is responsible for securing and governing an expanding multi-cloud footprint and shaping how BTS measures and improves its global cloud security posture. This role operates at the intersection of cloud engineering, vulnerability management, and regulatory compliance.

• Operate and tune the cloud security posture management platform to continuously assess on-premises (Windows and *Nix), AWS, and Azure environments against approved configuration baselines and industry benchmarks.
• Translate regulatory and internal control requirements into enforceable configuration standards for both cloud and on-premise environments, and maintain mapping between technical controls and frameworks such as NIST and CIS.
• Validate and risk-rank findings using business context, drive remediation to closure with cloud platform and application teams, and administer the exception and risk-acceptance process.
• Codify controls as preventive guardrails and shift detection into infrastructure-as-code and CI/CD pipelines, automating recurring assessment and evidence collection wherever possible.
• Provide clear reporting on control coverage, remediation SLAs, and residual risk to global engineering, business operating units, security management, and senior leadership teams.

Qualifications

Qualifications:

• Minimum of 5+ years in Information Security, IT audit, cloud security, or a related field, with demonstrated focus on cloud compliance and configuration risk.
• Hands-on working knowledge of at least one major cloud provider (e.g., AWS, Azure), including identity and access management, network architecture, logging, encryption, and key management.
• Proven experience mapping technical controls to recognized frameworks and supporting a formal audit or assessment cycle from evidence gathering through issue closure.
• Certifications such as CCSK, CCSP, CISA, CISSP, or a cloud provider security specialty certification are preferred.
• Proven ability to explain findings and secure remediation commitments from business, technical, and executive stakeholders.
• Demonstrated comfort using AI-assisted tools in a professional context and approaching AI as a standard part of modern workflow.
• Skilled in cloud security posture management and compliance scanning tools, such as Wiz, Prisma Cloud, Microsoft Defender for Cloud, and AWS Security Hub.
• Experience with standard operating systems.

Education

Requirement

• Bachelor’s degree in Computer Science, Information Security, Network Engineering, or a related technical discipline, or equivalent experience. Additional Company Details The company offers a competitive compensation plan and robust benefits package for full time regular employees.

The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment.

Important Outside Agency Notice

Only solicited resumes/candidate profiles that are submitted by a Berkley Preferred Agency Partner that have been requested by Berkley Internal Recruiting to engage in a particular search will be subject to the payment of Agency fees as defined in the formal agency agreement. Any unsolicited resumes/candidate profiles are not subject to payment of the agency fees.

Additional Requirements

Location and Travel:

• Primary location Wilmington, DE. Sponsorship Details Sponsorship not Offered for this Role