Remote Security Engineer - Cloud & IR Incident Response

Certinia; United Kingdom; Remote; GBP 50,000 - 75,000; Full time

Job summary

Certinia, a leading Sys of Action for services businesses, is hiring a hands-on Security Engineer in the UK. You will bridge initial triage with security architecture, moving from monitoring to active investigation and containment.

You will maintain SOC capabilities, perform phishing simulations, run threat hunts, and write automation scripts (Python/Bash) to accelerate incident response across AWS, Azure and GCP.

Qualifications

• 1–3 years of hands-on experience in Information Security, SOC, or a related technical field.
• Deep understanding of networking (TCP/IP), operating systems (Linux/Windows/macOS), and web application security (OWASP Top 10).
• Practical experience securing resources in at least one major cloud provider (AWS, Azure, or GCP).
• Proficiency in Python, Bash, or similar languages for automation and parsing logs.
• Demonstrated ability to investigate security events, analyze logs, and understand the lifecycle of a cyber attack (MITRE ATT&CK framework).
• Ability to solve technical problems with minimal guidance and manage your own queue of tasks.
• Ability to explain security risks to non-security colleagues (e.g., developers or IT staff).
• Familiarity with Docker and Kubernetes security concepts (bonus).

Responsibilities

• Perform deep-dive investigations and root cause analysis of alerts.
• Execute phases of Incident Response (IR) including containment, eradication, and post-incident review.
• Assist with phishing triage and analyzing reported emails.
• Monitor the SIEM platform and triage incoming events.
• Conduct proactive threat hunting using intelligence feeds for IoCs in networks and cloud.
• Triage incoming reports to Bug Bounty Program.
• Run internal penetration tests on applications and cloud infrastructure.
• Support red team exercises by executing attack vectors and simulating adversary behaviors.
• Design and launch phishing simulations to improve training and awareness.
• Implement and maintain security controls in cloud environments (AWS/Azure/GCP).
• Analyze CNAPP dashboards, validate alerts, and detect threats.
• Write scripts to automate IR/DR steps and create custom detections.
• Review internal tools and new features for security improvements.

Skills

Networking

Operating Systems

Web App Security

Cloud Security

Incident Response

Threat Hunting

Communication

Tools

Python

Bash

Docker

Kubernetes

SIEM

Job description

Certinia, a leading Sys of Action for services businesses, is hiring a hands-on Security Engineer in the UK. You will bridge initial triage with security architecture, moving from monitoring to active investigation and containment.

You will maintain SOC capabilities, perform phishing simulations, run threat hunts, and write automation scripts (Python/Bash) to accelerate incident response across AWS, Azure and GCP.