A career that’s the whole package!
At Conga, we’ve built a community where our colleagues can thrive. Here you’ll find opportunities to innovate and support growth through individual and team development, all within an environment where every voice is heard.
Conga lines up commercial operations so companies run as connected, smarter businesses. By unifying the people and processes that drive commerce, Conga aligns pricing, quoting, contracting, rebates, and communications so teams stay in sync and buyers keep moving forward. The result is trusted decisions, consistent buyer experiences, and profitable growth. More than 10,000 customers worldwide, including over 50% of the Fortune 100®, trust Conga when commercial complexity is high and global impact is on the line.
Job Title: Cloud Security Analyst II
Location: Boston, MA, Houston, TX,
Reports to: Manager, Security Enablement, Applications, and Services (SEAS)
A quick snapshot…
As a Cloud Security Analyst II at Conga, you will play a critical role in protecting our cloud ecosystem, applications, and services through vulnerability management, cloud security operations, automation, and emerging AI-enabled security capabilities.
This role is designed for an early-career security professional who has already demonstrated hands-on experience through internships, co-ops, research projects, or practical security work. You'll move quickly beyond observation into ownership, helping manage real vulnerabilities, support security operations, automate workflows, and contribute to AI-driven security initiatives that improve efficiency and strengthen our security posture.
Working as part of Conga's Security Enablement, Applications, and Services (SEAS) team, you'll partner closely with security engineers, platform teams, and business stakeholders to identify risks, improve visibility, and help secure critical cloud infrastructure and services.
This is not simply a ticket-processing role. It's an opportunity to build foundational expertise in enterprise cloud security while helping shape the future of intelligent security operations through automation and agentic AI.
Why it's a big deal…
Modern organizations operate across increasingly complex cloud environments where security teams must rapidly identify, prioritize, and remediate risks while enabling business growth and innovation.
As a Cloud Security Analyst II, you'll help ensure Conga maintains a strong security posture across its cloud platforms, applications, and services. Your work will directly impact vulnerability reduction, operational resilience, risk management, and security automation initiatives.
You'll gain hands-on experience with cloud security technologies, vulnerability management programs, AI-assisted security operations, and enterprise-scale automation while contributing to a team responsible for protecting critical business systems and customer data.
The work you do will help transform how security teams leverage automation and AI to scale security operations and reduce operational burden.
What you'll lead…
Vulnerability Management
- Run and maintain credentialed vulnerability scans across cloud, infrastructure, and containerized environments.
- Validate findings, assess risk severity, and prioritize remediation efforts using industry frameworks such as CVSS and CISA Known Exploited Vulnerabilities (KEV).
- Route findings to appropriate engineering teams and track remediation progress against established service level agreements.
- Document vulnerabilities, business impact, and remediation guidance clearly for technical teams and auditors.
- Support security exception and risk acceptance processes by gathering evidence and documenting compensating controls.
Cloud Security Fundamentals
- Monitor cloud environments for security configuration drift and compliance against internal security standards.
- Support Infrastructure-as-Code security reviews for security-owned resources under the guidance of senior security engineers.
- Assist with the administration and operation of security technologies, including CNAPP, WAF, DNS security, Zero Trust, and related services.
- Evaluate cloud configurations using core security principles such as encryption, access controls, and data protection.
- Apply threat modeling concepts to identify risks, detection opportunities, and response requirements for new infrastructure and services.
Automation & AI-Enabled Security
- Develop automation scripts and workflows using Python, Bash, or similar technologies to reduce manual security work.
- Leverage AI-assisted security tooling to improve vulnerability triage, analysis, and enrichment activities.
- Contribute to the development of internal automation frameworks, reusable security workflows, and AI agent capabilities.
- Design, build, deploy, and maintain AI agents that integrate with cloud platforms, ticketing systems, security tools, and operational processes.
- Validate agent outputs and workflows to ensure reliability, accuracy, auditability, and business alignment.
- Monitor and continuously improve deployed automation and AI solutions as systems and business processes evolve.
- Build dashboards, reports, and security metrics that provide visibility into risks, remediation progress, and operational effectiveness.
Incident Response Support
- Assist with security investigations by collecting logs, gathering evidence, documenting findings, and supporting forensic analysis efforts.
- Collaborate with senior incident responders during active security events and post-incident reviews.
- Contribute to security documentation and lessons learned that improve detection and response capabilities.
Cross-Functional Collaboration & Business Impact
- Partner with Engineering, Infrastructure, Cloud Operations, Compliance, and Product teams to improve security outcomes.
- Support security initiatives that reduce risk while enabling business growth and operational efficiency.
- Help improve security processes through data-driven insights and automation.
- Promote a security-first mindset by providing clear guidance and actionable recommendations across the organization.
Are you the person we're looking for?
A proven track record…
- Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, Information Technology, or a related field.
- Experience through internships, co-ops, research assistantships, or hands-on projects involving security, cloud technologies, automation, or infrastructure.
- Hands-on experience working with large language models, AI agents, prompting techniques, or tool/function-calling integrations.
- Familiarity with at least one AI agent framework or protocol such as MCP, LangChain, LlamaIndex, AutoGen, CrewAI, or similar technologies.
- Experience evaluating AI-generated outputs for accuracy, reliability, and business appropriateness.
- Strong analytical and problem-solving skills with exceptional attention to detail.
- Comfort working in Linux environments and using command-line tools.
- Programming or scripting experience with Python preferred.
- Understanding of networking fundamentals including DNS, HTTP/S, TLS, and firewalls.
- Familiarity with Git and modern version control practices.
- Strong written and verbal communication skills.
- Demonstrated passion for cloud security and continuous learning.
Key Competencies
Security Mindset
You approach problems with curiosity and a risk-focused perspective, identifying vulnerabilities, misconfigurations, and security opportunities before they become larger issues.
Technical Problem Solving
You enjoy analyzing complex challenges, investigating root causes, and developing practical solutions through technology and automation.
Automation First Thinking
You actively seek opportunities to eliminate repetitive work through scripting, tooling, and intelligent automation.
Cloud Security Fundamentals
You understand the importance of securing cloud environments through strong controls, continuous monitoring, and proactive remediation.
Ownership & Accountability
You take responsibility for assigned work, follow through on commitments, and maintain a high standard of quality and accuracy.
Communication & Collaboration
You communicate effectively with both technical and non-technical stakeholders and work collaboratively across teams to achieve security objectives.
Here's what will give you an edge…
- Internship or project experience with AWS, Microsoft Azure, or Google Cloud Platform (GCP).
- Master's degree (completed or in progress) in Cybersecurity, Information Technology, Engineering, Data Analytics, or a related field.
- Experience deploying, monitoring, or maintaining production AI agents or automation workflows.
- Exposure to retrieval-augmented generation (RAG), vector databases, agent observability, or monitoring platforms.
- Familiarity with vulnerability management tools, CNAPP, CSPM, CWPP, or SIEM technologies.
- Security certifications such as Security+, SC-900, AZ-900, CCSK, or related credentials.
- Experience with Terraform, Kubernetes, CI/CD pipelines, or DevSecOps practices.
- Understanding of data protection concepts including encryption, access management, and data loss prevention.
- Experience integrating APIs across business and security platforms.
- Familiarity with reporting, analytics, or data visualization tools.
What we value…
- Curiosity & Continuous Learning: Staying current on evolving cloud security, AI, automation, and threat landscapes.
- Security by Design: Building secure solutions that reduce risk while enabling productivity and innovation.
- Accountability: Taking ownership of outcomes and maintaining high standards of execution.
- Collaboration: Working across teams to deliver stronger security and business results.
- Bias for Action: Solving problems quickly, learning continuously, and driving measurable impact.
- Innovation: Embracing automation, AI, and modern technologies to improve efficiency and scale.
- Excellence in Craft: Treating security as a business-critical function that enables trust, resilience, and growth.
What success looks like…
90 Days
- Independently run vulnerability scans and triage routine findings.
- Become proficient with the team's core security tools and workflows.
- Build foundational relationships with engineering and security stakeholders.
6 Months
- Own remediation tracking and vulnerability management activities for an assigned scope.
- Develop automation scripts that improve operational efficiency.
- Contribute to incident investigations and AI-enabled security initiatives.
12 Months
- Own the deployment and maintenance of at least one production AI or automation capability.
- Lead a security automation project from design through implementation.
- Serve as a trusted partner for assigned systems, technologies, or security programs.
- Drive measurable improvements in risk reduction, efficiency, and security visibility.
In the spirit of the Conga Way, we strive to design easy-to-understand compensation programs that are fair and free from any type of discrimination. In keeping with this approach, we are committed to delivering competitive compensation and benefits packages to our colleagues worldwide and communicating transparently about the structure of our compensation programs.
Listed below is the U.S. base salary range for this full-time position. Within the range, individual pay is determined by job-related skills, experience, and relevant education, or training. In addition to base salary, Conganeers receive a variable incentive pay component, perks such as flexible work options, and a full range of benefits including medical and dental insurance.
The posted salary ranges are for the expectations outlined in the job description. We are often open to a wide variety of profiles and sometimes have flexibility within our organizational structure to adjust the role responsibilities up or down should we select a candidate that is less or more experienced than the posted job requirements. In these occasional cases, we will communicate the revised salary range to the candidate during the selection process.
U.S base salary range:
$88,880—$133,320 USD
Did we pique your interest?
If this sounds like the kind of job you would love in the kind of environment where you would thrive, please click apply. We'd love to hear from you!
Preferred Resume Format
We accept resumes in any format, we suggest using PDF or plain text. These formats help ensure that your resume’s formatting remains intact, making it easier for our recruiters to review your application promptly.
Don’t meet every requirement for the role?
Studies have shown that women and members of ethnic minorities are less likely to apply to jobs unless they meet every single qualification. At Conga we are dedicated to building a diverse, inclusive, and authentic workplace, so if you’re excited about this role but your experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You just might be the right candidate for this or other roles.
Additional Information
Conga is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law. We understand interviewing can be stressful for those with disabilities. If reasonable accommodation is needed to allow you to show us your best self, please let your recruiter know as soon as possible. All your information will be kept confidential according to EEO guidelines. Conga is not open to third party solicitation or resumes for our posted FTE positions. Resumes received from third party agencies that are unsolicited will be considered complimentary.
Conga's Applicant Privacy Statement
The information you provide during the application process will be used in accordance with Conga’s Applicant Privacy Statement (https://conga.com/applicant-privacy-statement). By submitting your application, you acknowledge and agree to the terms outlined in this privacy statement.
