Intermediate Security Operations Engineer

About the role

We are seeking an Intermediate Security Operations Engineer to join our security operations team. The role focuses on cloud security within AWS, combining incident response, automation, and client collaboration to protect and harden cloud environments.

Key responsibilities

• Perform ticket triage, investigate alerts, and respond to security incidents.
• Conduct threat hunting, vulnerability management, and log analysis.
• Manage and improve SIEM platforms and remote security monitoring deployments.
• Implement and maintain AWS security best practices, including IAM, GuardDuty, Security Hub, AWS Config, CloudTrail, CloudWatch, and DNS/VPC security.
• Support multi‑region, multi‑tenant cloud environments and secure networking configurations.
• Develop infrastructure‑as‑code using Terraform and automate tasks with Python or Bash.
• Assist with CI/CD security integrations and troubleshoot AWS managed services.
• Engage with clients and internal stakeholders to gather requirements, provide guidance, and create documentation.

Required profile

• Minimum 2 years of experience in SecOps, cloud security, or a related field.
• Strong analytical and troubleshooting abilities.
• Ability to work collaboratively with clients and internal teams.

Required skills

• AWS security services: IAM, GuardDuty, Security Hub, AWS Config, CloudTrail, CloudWatch.
• Networking concepts: DNS, VPC, routing.
• Infrastructure‑as‑code: Terraform (or similar).
• Scripting: Python, Bash.
• REST API integration and cloud automation.
• Vulnerability management tools: Tenable, Nessus.