Senior Cloud Security Operation Analyst

You will join a team to contribute to the continuous improvement of cloud security and cloud security incident response practices in a dynamic, growing organization. You will partner with developers, DevOps, system administrators, architects, and cybersecurity stakeholders to drive change. This role is ideal for someone who is hands-on, curious, and analytical and comfortable with cloud platforms, security monitoring, automation, orchestration and response tools, scripting, and cross-functional technical collaboration.

Requirements

• Degree in computer science, 5 to 10 years of experience, or an equivalent combination of training and experience.
• Security certification required: CISSP, CSSLP, CEH, Security+, GIAC, or demonstrated equivalent security knowledge and experience.
• Cloud or vendor-specific security certification, or demonstrated equivalent security knowledge and experience.
• Experience in cloud cybersecurity operations, cloud incident response, and cloud security.
• Hands-on knowledge of cloud platforms.
• Experience with cloud-native security tools.
• Ability to investigate security events, document findings, and communicate recommendations clearly.
• Proficiency in data analysis and querying using scripting languages and tools such as Python, PowerShell, Bash, YARA-L, SQL, KQL, SPL, or others.
• Experience with SIEM, Endpoint Detection and Response tools, Network Security tools, Security Orchestration, and Cloud Posture Management tools.
• Knowledge of information security risks, frameworks, and industry best practices.
• Ability to work independently and collaborate effectively with technical and non-technical stakeholders.
• Hands-on experience with security orchestration and automation.
• Hands-on security experience with implementation and support of CI/CD pipelines, Secret Management solutions, WAF, Cloud Firewall rules management, Kubernetes, Containers, API gateways, Infrastructure as Code, Compliance as Code, cloud policies, and GitOps.
• Knowledge of development languages: at least one or two of the following: Java, Node.js, C#, .NET.

Responsibilities

• Identify and drive resolution of dangerous cloud misconfigurations, overly permissive access policies, and identity-based vulnerabilities.
• Protect cloud-native infrastructure and digital assets by monitoring real-time signals and investigating threats.
• Review and validate cloud security controls, including identity and access management, network security, logging, encryption, and workload protection.
• Review security alerts, track log data, and tune detection rules using cloud-native platforms.
• Investigate suspicious activities, isolate compromised cloud resources, and mitigate active incursions or data exposures.
• Support cloud incident response activities, including containment, evidence collection, root cause analysis, and post-incident documentation.
• Proactively search cloud environments for hidden indicators of compromise and unusual activities.
• Configure and support cloud security services and hardening configurations.
• Support compliance, audit, and reporting activities related to cloud security operations.
• Mentor and enable stakeholders on cloud security to uplift posture and address technical debt.

Benefits

• US and EU projects based on advanced technologies.
• Competitive compensation based on skills and experience.
• Regular performance appraisals to support growth.
• Flexible workspace: remote or office.
• Bonuses for article writing, public talks, and other activities.
• Generous time off, including vacation, national holidays, sick leave, and family days.
• Personalized learning programs tailored to interests and skill development.
• Free tech webinars and meetups.
• Regular corporate online activities.
• Friendly, supportive community.