Senior Cloud Security Engineer — SIEM & SOC Lead

Duco; Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Competitive salary

Performance bonus

Healthcare cover

Life insurance 4x

Unlimited annual leave

Flexible working

Professional development

Cycle to work

Volunteer days

Job summary

Duco is seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team. You will own threat detection, response and prevention across our AWS-hosted SaaS platform, and run the internal SIEM and managed SOC relationships with a focus on robust security controls.

You will partner with Engineering, Platform and IT teams, report to the Head of Information Security, and help maintain top-tier security across our cloud estate while driving secure CI/CD practices.

Qualifications

• Proven experience in security operations or cloud security engineering.
• Hands-on SIEM experience including design and tuning of detections and alert response.
• Strong knowledge of AWS security services and architecture (IAM, SCPs, CloudTrail, GuardDuty, Security Hub).

Responsibilities

• Own run-time security posture of AWS environment including IAM, guardrails, logging and remediation of findings.
• Lead vulnerability management and external exposure management programmes.
• Own SIEM platform, tune detections, and manage SOC relationships with SLAs.

Skills

Security operations

Cloud security

SIEM tuning

AWS security

Incident response

Python scripting

Infrastructure as code

Risk communication

Education

Bachelor's degree in CS/IT

Tools

SIEM platforms

Kubernetes

Terraform

AWS CloudTrail / GuardDuty

Job description

Duco is seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team. You will own threat detection, response and prevention across our AWS-hosted SaaS platform, and run the internal SIEM and managed SOC relationships with a focus on robust security controls.

You will partner with Engineering, Platform and IT teams, report to the Head of Information Security, and help maintain top-tier security across our cloud estate while driving secure CI/CD practices.