Security Analyst

About Sweet Security Sweet Security is one of the fastest-growing companies in AI and cloud security, building a fundamentally different approach to protecting modern applications. Instead of simply detecting threats after they occur, Sweet proactively enforces security in runtime, helping organizations stop risky behavior before it impacts production. Backed by $120M in funding and trusted by leading enterprises, we're growing rapidly and looking for exceptional people who want to solve hard technical problems, move fast, and help define the future of cloud and AI security. Job Description Sweet Security is looking for a Security Analyst to join our team and help customers strengthen their cloud security posture. In this role, you'll investigate security findings, analyze cloud environments, identify security risks, and provide customers with clear, actionable recommendations. You'll work closely with Customer Success, Product, and R&D to improve our platform, enhance detection capabilities, and help shape the future of AI-driven cloud security. If you're passionate about cybersecurity, enjoy solving complex security challenges, and want to make an impact in a fast-growing startup, we'd love to hear from you. Responsibilities Investigate security findings, customer environments, and cloud security risks. Analyze Application Security, API Security, and Product Security vulnerabilities. Review and tune security detections to improve accuracy and reduce false positives. Stay up to date with emerging threats, attack techniques, and malware trends. Respond to customer questions and provide clear, actionable security guidance. Create concise investigation reports and security recommendations for customers. Work closely with Customer Success and participate in customer calls when needed. Collaborate with Product and R&D to improve platform capabilities, investigation workflows, and detection quality. Requirements 3+ years of hands-on experience in a SOC, Security Operations, Threat Hunting, Security Research, or a cybersecurity company. Strong understanding of detection & response, vulnerability management, API Security, Identity Security, and cloud security concepts. Experience investigating security alerts using SIEM, SOAR, and EDR solutions. Strong knowledge of AWS, Azure, or GCP, including IAM, networking, logging, and cloud security best practices. Good understanding of Application Security concepts, including OWASP Top 10, secure coding, SAST, DAST, and vulnerability management. Familiarity with Linux and Kubernetes. Excellent written communication skills with the ability to produce clear customer-facing reports. Native English speaker. Currently enrolled in a university program (or equivalent) in Cybersecurity, Computer Science, Information Security, or a related field, with at least one academic year remaining.