Description

You will own the security posture of cloud and on-premises environments, ensuring continuous compliance and threat mitigation.

This role is remote.

Responsibilities

• Identify and remediate vulnerabilities across AWS, Azure, and GCP, enforcing secure configuration baselines and least-privilege IAM practices.
• Deploy and manage CSPM and EDR/XDR solutions to monitor misconfigurations and endpoint threats, driving 100% effectiveness.
• Establish logging, monitoring, and incident response playbooks, integrating systems with SIEM platforms for rapid detection and investigation.
• Develop automation scripts in PowerShell, Bash, or Python to streamline patch management, system hardening, and access reviews.
• Support compliance initiatives (SOC2, ISO 27001, NIST) by documenting security configurations and reporting on risk reduction.

Required Skills

• 10+ years of experience in information security with a focus on cloud security (AWS, Azure, GCP).
• Hands-on expertise with CSPM tools such as AWS Security Hub, Microsoft Defender for Cloud, Prisma Cloud, or Wiz.
• Strong proficiency in EDR/XDR solutions including CrowdStrike, SentinelOne, or Microsoft Defender.
• Solid knowledge of vulnerability management and patch management for Windows and Linux systems.
• Experience with IAM, MFA, and PAM solutions (Active Directory, Azure AD/Entra ID, Okta, CyberArk).
• Familiarity with SIEM and security monitoring platforms like Splunk or Microsoft Sentinel.
• Advanced scripting skills in PowerShell, Bash, and Python for security automation.
• Understanding of security frameworks (NIST, CIS, ISO 27001) and virtualization technologies (VMware, Hyper-V).

Preferred Skills

• Cloud security certifications (AWS Security Specialty, AZ-500, GCP Security Engineer) or foundational certs (CEH, Security+).
• Proven experience handling security incidents and responding to threats.

Key Skills

Education

Bachelor's degree