Security Operations Specialist
Project Description:
We’re looking for a Security Operations Engineer to protect our cloud environments, systems, and the data our clients trust us with. You’ll own cloud security monitoring, drive vulnerability management, lead incident response, and keep access across our platforms tight and well governed
Client Description:
Our client is an international Result-as-a-Service ecosystem for customer support outsourcing. The company brings together the right people, processes, and technology to help its clients reach their goals. The services cover customer support operations, omnichannel support, an AI support platform, help desk and technical support, Zendesk implementation, migration and audits, startup support, and back-office support.
Requirements:
- 3+ years of experience in security operations, cloud security, or a related role
- Hands-on experience securing AWS and/or GCP environments
- Practical experience with AWS Security Hub, GuardDuty, CloudTrail, and related services
- Proven experience with vulnerability management tools and processes
- Experience handling security incidents from detection through resolution
- Strong understanding of IAM concepts, roles, policies, and least-privilege access
- Solid knowledge of logging, monitoring, and alerting practices
- Strong analytical and troubleshooting skills
- Clear written and verbal communication in English
Responsibilities
- Monitor and secure our AWS and GCP environments using AWS Security Hub, GuardDuty, and GCP’s native security tooling (such as Security Command Center)
- Triage, investigate, and respond to security alerts and findings; tune detections to reduce noise
- Run the vulnerability management program end to end: scanning, prioritization, remediation tracking with engineering teams, and reporting
- Lead incident response: detection, containment, investigation, recovery, and post-incident reviews
- Build and maintain incident response playbooks and runbooks
- Conduct regular IAM reviews across cloud and SaaS platforms, enforcing least privilege and removing excess or stale access
- Improve security monitoring, logging, and alerting coverage across infrastructure and applications
- Support security compliance efforts and audits, providing evidence and documentation
- Recommend and implement improvements to our overall security posture