Information Security Analyst – Cloud & Azure Focus

About the role

The Rainforest Alliance is seeking an experienced Information Security Analyst to protect its digital assets across cloud and on‑premise environments. You will lead incident response, improve security posture, and coordinate security initiatives with internal teams and external partners.

Key responsibilities

• Participate in security incident response, from detection through remediation and post‑incident analysis.
• Monitor alerts from SIEM, EDR, and cloud logs; develop runbooks and incident response plans.
• Conduct vulnerability assessments, support penetration‑testing remediation, and produce regular security reports.
• Administer Azure security services (Defender for Cloud, NSGs, Key Vault, Firewall) and ensure compliance of IaaS/PaaS deployments.
• Secure Entra ID (Azure AD) with Conditional Access, MFA, Identity Governance and PIM.
• Manage Microsoft 365 security (Defender for Office365, DLP, Purview) and endpoint hardening across Windows, macOS and Linux.
• Operate and tune XDR solutions, currently CrowdStrike Falcon, with migration to Microsoft Defender XDR.

Required profile

• Minimum 3 years of hands‑on experience in information security.
• Proven experience securing Microsoft cloud environments (Azure, Entra ID, Microsoft 365).
• Experience with endpoint hardening, vulnerability scanning and security incident response.

Required skills

• Azure Security Center/Defender for Cloud, Azure Network Security Groups, Azure Key Vault, Azure Firewall.
• Entra ID (Azure AD) Conditional Access, Multi‑Factor Authentication, Identity Governance, Privileged Identity Management.
• Microsoft 365 administration, Defender for Office365, Data Loss Prevention, Microsoft Purview.
• Endpoint hardening tools and policies for Windows, macOS, Linux; Group Policy and MDM solutions.
• CrowdStrike Falcon (XDR) administration and threat hunting.
• SIEM and EDR monitoring, vulnerability scanning, CVE remediation.
• Familiarity with security frameworks such as NIST, ISO 27001, Cyber Essentials.

What we offer

• Global mission‑driven organization with a collaborative culture.
• Opportunities for professional growth and career development.
• Flexible hybrid working environment and remote‑work flexibility.
• Generous time‑off policy and wellbeing initiatives to support work‑life balance.