Cloud Ops Security Engineer

About the role

We are looking for a Cloud Ops Security Engineer to own and operate our cloud security monitoring and hardening platform. You will work closely with development and infrastructure teams to ensure continuous protection of cloud workloads and data.

Key responsibilities

• Own the SIEM (Wazuh), tune detection rules and review alerts daily, ingesting CloudTrail, Cloud Audit, Azure Monitor and other cloud signals.
• Execute incident‑response runbooks, contain threats, investigate, document findings and drive post‑mortems.
• Encode security baselines as Infrastructure‑as‑Code guardrails and golden images to prevent configuration drift.
• Continuously monitor cloud posture, detecting misconfigurations such as public storage, over‑permissive IAM, open security groups and unencrypted data.
• Run vulnerability scans on operating systems, dependencies and cloud resources, assign severity and ensure remediation within SLAs.
• Integrate web‑app security testing (ZAP, Semgrep) into CI pipelines and guide delivery teams on remediation.
• Enforce identity and access governance – MFA, least‑privilege, conditional access and joiner/mover/leaver processes.
• Operate secret‑management vaults, enforce short‑lived credentials and keep secret‑scanning tools (Gitleaks, TruffleHog) green.
• Draft security policies aligned with ISO 27001 controls and provide threat‑modeling and architecture reviews for new projects.

Required profile

• Minimum 3 years of hands‑on cloud or application security experience.
• CREST certification or equivalent recognised security credential.
• Deep expertise in AWS security; practical knowledge of GCP and Azure is also required.
• Proven ability to operate a SIEM, tune alerts and lead incident response.

Required skills

• AWS, GCP, Azure cloud platforms
• Wazuh (or comparable SIEM) and log analysis
• CloudTrail, Cloud Audit, Azure Monitor
• Web Application Firewalls (WAF) and IAM management
• Network security controls
• DAST/SAST tools: ZAP, Semgrep
• Secret‑scanning tools: Gitleaks, TruffleHog
• Infrastructure‑as‑Code: Terraform, CloudFormation
• Vault or equivalent secret‑management solution