Job Description
Job Description
Job Description Cloud Security Engineer (IR)
Our cybersecurity operation team (SecOp) is looking for a Cloud Security Engineer, who will join and help the team to perform Security Operations Center (SOC) duties, which focus on cloud incident response, malware analysis, and monitoring.
This role will work with the team and apply technologies, processes, and practices designed to protect networks, devices, and data from malicious attack, damage, or unauthorized access.
Responsibilities :
- Develop, tune, automate cloud security solutions and tools to enhance monitoring, alerting and incident response capabilities.
- Use the cloud platforms and cloud native tools to conduct threat analysis, assessment, incident investigations.
- Coordinate remediation and restoration efforts.
- Record identified vulnerabilities, create remediation tickets and track their status
- Recognize and research attacker tools, tactics, and procedures (TTP) in indicators of compromise (IOCs) that can be applied to current and future investigations
- Provide after-hours support as need and participant on-call rotation.
Qualifications :
- Bachelor’s or master’s degree in : Computer Science, Information Security, Cybersecurity, or a related degree.
- 5+ year experience in one or more areas : Security Operation, Incident Response, Information Security Technology, Infrastructure Cloud engineering, Cloud Admin, etc.
- Strong Cloud security knowledge (prefer AWS and Azure) in IAM, networking, architecture, etc.
- Good security concepts of threat categories (such as malware, phishing attacks, Defense-in-Depth, MITRE ATT&CK framework, etc.)
- Good experiences in Python, JSON and any query languages.
- Experiences to security tools such as SIEM, EDR, firewalls, IDS / IPS, anti-spam, content management would be a definite plus.
- AWS Security Specialty and / or Azure Security Associate certification highly preferred.
- SharePoint, Excel, JIRA, and / or Microsoft Office skills
Additional Qualifications :
- Strong verbal and written communication, analytical, problem solving skills.
- Passionate in security and ability to quickly assimilate new information.
- Ability to successfully interface with internal and manage expectations of others.
- Ability to document and explain technical details in a concise, understandable manner.
- Digital Forensic experience is a definite plus.
30+ days ago