Cloud Security Engineer

Ocho People; Belfast City District; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

35 days annual leave

8% matched pension

Equity/share options

Hybrid work (3 days in the Belfast-UK)

Job summary

Ocho People is seeking a Security Engineer to join the Managed Detection and Response (MDR) team as the founding UK member of the Security organisation. This role focuses on proactive reviews, advanced customer guidance, and owning UK-hours coverage.

You will work with analysts, researchers, and engineers, with a clear path to technical or team leadership as the UK presence grows. Based in Belfast with a hybrid model (3 days in the office).

Qualifications

• Willing to join a shared on-call rotation with occasional nights, weekends or holidays.
• Hands-on cybersecurity experience, ideally from a leading cloud or cloud security company.
• Strong detection engineering, incident response, and threat analysis skills; able to explain supply chain, API, malware, and runtime attack techniques in depth.
• Experience with AWS, GCP, or Azure, plus Docker/Kubernetes and Linux; comfortable with networking fundamentals and Python/Bash scripting.
• Excellent communication with customers and ability to stay calm under pressure.
• Self-directed and comfortable in a fast-paced startup environment.

Responsibilities

• Help fine-tune detection and response mechanisms and support proactive reviews of customer environments to identify risks and recommend improvements.
• Lead in-depth investigations into supply chain, API, malware, and runtime attacks, documenting outcomes and building playbooks to improve future detection.
• Collaborate with Security Analysts, Research, and Backend teams to enhance detection quality.
• Own complex or critical incidents escalated from Tier 1/2, including live, high-pressure customer engagements.
• Take part in recurring customer meetings, translating security findings into clear recommendations, and stay composed when conversations get tense.
• Keep up to date with emerging threats and attack techniques, and contribute to training AI-driven detection models.

Skills

Detection engineering

Incident response

Threat analysis

AWS

GCP

Azure

Docker/Kubernetes

Linux

Python

Bash scripting

Customer communication

Tools

Docker

Kubernetes

Job description

Our client is a fast-growing cloud security company whose platform uses runtime data to identify and prioritise the risks that matter most, giving customers efficient, end-to-end protection across their cloud infrastructure, from misconfigurations to malware.

Role

Our client is hiring a Security Engineer to join their Managed Detection and Response (MDR) team as the founding UK member of their Security organisation. You'll focus on proactive reviews and advanced customer guidance, independently owning UK-hours coverage, and work closely with analysts, researchers, and engineers, with a clear path to technical or team leadership as the UK presence grows.

What You'll Do:

• Help fine-tune detection and response mechanisms and support proactive reviews of customer environments to identify risks and recommend improvements.
• Lead in-depth investigations into supply chain, API, malware, and runtime attacks, documenting outcomes and building playbooks to improve future detection.
• Collaborate with Security Analysts, Research, and Backend teams to enhance detection quality.
• Own complex or critical incidents escalated from Tier 1/2, including live, high-pressure customer engagements.
• Take part in recurring customer meetings, translating security findings into clear recommendations, and stay composed when conversations get tense.
• Keep up to date with emerging threats and attack techniques, and contribute to training AI-driven detection models.

Experience:

• Willing to join a shared on-call rotation, with occasional availability for nights, weekends, or holidays.
• Solid, hands-on cybersecurity experience, ideally from a leading cloud or cloud security company.
• Strong detection engineering, incident response, and threat analysis skills, able to explain supply chain, API, malware, and runtime attack techniques in depth.
• Hands-on with AWS, GCP, or Azure, plus Docker/Kubernetes and Linux; comfortable with networking fundamentals and Python/Bash scripting.
• Strong communicator, confident engaging customers directly and staying composed under pressure.
• Self-directed, curious, and comfortable in a fast-paced, high-ownership startup environment.

Package:

• Belfast office base, hybrid working (3 days/week in office).
• 35 days annual leave (inclusive of statutory holidays).
• 8% matched pension.
• Equity/share options.