Senior Cloud Security Engineer — AWS, SIEM & MDR Lead (Remote)

LT Harper Group; Polska; Remote; PLN 90,000 - 130,000; Full time

Benefits offered by this job

Private medical insurance

Healthcare cashback scheme

4x salary life assurance

Unlimited annual holiday

Enhanced family leave

Work abroad for up to 6 weeks a year

Learning and development budget

Job summary

LT Harper Group in Poland is seeking a Senior Security Engineer (Cloud and SecOps) to own threat detection, response and prevention across our AWS-hosted SaaS platform used by major banks. You’ll lead SIEM, the managed SOC relationship and run-time security, stepping in during incidents.

Join a small Information Security team across London and Poland, implementing detections, IAM guardrails, and automation with IaC.

Qualifications

• Experience in security operations or cloud security engineering
• Hands-on SIEM design, tuning detections and incident response
• AWS security expertise: IAM, SCPs, CloudTrail, GuardDuty, KMS, VPC
• Container and Kubernetes runtime security, ideally on Amazon EKS
• Experience with managed SOC/MDR providers
• Python scripting and infrastructure-as-code knowledge

Responsibilities

• Own the SIEM: onboard log sources, tune detections, ensure MITRE ATT&CK coverage
• Manage the internal run of the managed SOC, runbooks, reviews and SLAs
• Lead end-to-end incident response from triage to root cause
• Own AWS run-time security: IAM, guardrails, logging, corporate estate security
• Run vulnerability management, attack surface, pen testing
• Automate security processes with scripting and IaC

Skills

Security operations

Cloud security

SIEM

Python scripting

Infrastructure as code

Incident response

Kubernetes security

Tools

IAM

Organizations and SCPs

CloudTrail

GuardDuty

Security Hub

KMS

VPC design

MDR/SOC tooling

Job description

LT Harper Group in Poland is seeking a Senior Security Engineer (Cloud and SecOps) to own threat detection, response and prevention across our AWS-hosted SaaS platform used by major banks. You’ll lead SIEM, the managed SOC relationship and run-time security, stepping in during incidents.

Join a small Information Security team across London and Poland, implementing detections, IAM guardrails, and automation with IaC.