SOC Analyst – Cloud Security Operations

Mployee.me; Dadri; Remote; INR 1,400,000 - 2,200,000; Full time

Job summary

Mployee.me seeks a Cloud Security Analyst to monitor, investigate, and escalate cloud-originated threats across its hosted environment. You will review suspicious cloud behavior, privilege misuse, misconfigurations, and abnormal API activity, while correlating findings with endpoint, email, identity, and application telemetry.

Join a SOC that is maturing toward crypto-/fintech-aware security, focusing on sensitive operations and customer-facing systems.

Qualifications

• 5-7 years of cloud security operations experience.
• Experience investigating cloud-originated incidents and coordinating with DevSecOps/IAM/IT teams.
• Familiarity with cloud services and security monitoring tools.

Responsibilities

• Investigate suspicious activity across AWS and other cloud services.
• Analyze CloudTrail logs for anomalous access and unusual API calls.
• Correlate cloud events with endpoint, email, identity, and application telemetry.
• Investigate risky SaaS and cloud-app activity surfaced by Netskope.
• Assess incidents for business impact and coordinate remediation.

Skills

Cloud security operations

Cloud log analysis

AWS security investigations

Cloud access anomaly review

Cloud attack-path awareness

SaaS/cloud usage monitoring

Operational telemetry correlation

Tools

CrowdStrike

NetSkope

Cloudflare

Sentry

Vercel

Job description

Summary

The candidate will be responsible for cloud-focused monitoring, investigation, and escalation support across the organization’s hosted environment. The analyst will review suspicious cloud behavior, privilege misuse, configuration-related exposure, abnormal API activity, and cloud-originated attack paths, while correlating findings with endpoint, email, identity, and application telemetry.

The role supports the current traditional SOC baseline while helping the SOC mature into a crypto-/fintech-aware function by identifying cloud incidents that may affect sensitive operations, high-risk internal services, or customer-facing business systems.

Key Responsibilities

• To conduct investigations of suspicious activity spanning across AWS and other cloud services
• Analyze CloudTrail logs for anomalous cloud access, privilege misuse, access key issues, unusual API calls, and suspicious console behavior
• Connect cloud events to CrowdStrike, Netskope, Cloudflare, Sentry & Vercel context
• Investigate Netskope surfaced risky SaaS and cloud-app activity
• Investigate usage of unauthorized applications, and risky movement of files — abnormal user activity or a policy breach that increases the cloud attack surface
• Analyze cloud alerts with their operational or business impact
• Restrict, expand incidents affecting critical services, administrative workflows, or sensitive data paths
• Assist in coordinating remediation with DevSecOps, IAM, and IT teams
• Suggest improvements in visibility, detection, and cloud monitoring coverage
• 24×7 operations

Mandatory Expertise

• Cloud Security Operations

Good to Have

• CrowdStrike and/or NetSkope

Optional

• Microsoft AD

Preferred Additional Skills

• AWS security investigations
• Cloud log analysis
• Cloud access anomaly review
• Cloud attack-path awareness
• SaaS/cloud usage monitoring
• Basic application telemetry correlation using Sentry
• Operational awareness of hosted web/application platforms such as Vercel

Preferred Certifications

• AWS Security Specialty
• Security+
• CySA+
• SC-200

Success Measures

• Quality of cloud incident validation
• Accuracy of severity and impact assessment
• Timeliness of escalation for cloud misuse or suspicious access
• Quality of coordination with DevSecOps / IAM / IT
• Detection improvement recommendations for cloud-related threats

Job Summary

Location Noida, India/Dubai, UAE

Job Type Full-time

Date Posted June 19, 2026

Experience 5-7 Years

Working Hours 9:00 AM - 6:00 PM