Cloud Security Operations Engineer

📋 Description

• Triage and investigate alerts end-to-end across cloud-native tooling (GuardDuty, Sentinel, Security
• Detect and respond to cloud-specific threats, including identity compromise, privilege escalation
• Build detections on cloud audit logs (CloudTrail, Azure Activity and Entra ID logs, GCP Cloud Audit
• Run proactive threat hunts using ATT&CK-aligned methods, including the Cloud and Containers
• Build automation for cloud containment actions, such as credential revocation, instance isolation
• Lead incident response from scoping and containment through post-incident review, performing

🎯 Requirements

• 4+ years in security engineering, SOC operations (T2/T3), or incident response within a complex
• Bachelors Degree (or equivalent experience) and/or 5 years of related experience
• Strong knowledge of cloud security architecture and telemetry in at least one major provider (AWS
• Deep understanding of cloud IAM and identity-based attack paths, such as role assumption abuse
• Hands-on experience investigating real cloud incidents using native cloud logs and forensic
• Experience with cloud-native threat detection services and with ingesting and normalizing cloud

🎁 Benefits

• Core Values: Human-First culture
• Growth Opportunities: Mentoring and career development opportunities
• Inclusive, fair, and transparent hiring process