Senior Cloud Security Engineer - AWS & SOC

Duco; Wrocław; On-site; PLN 220,000 - 320,000; Full time

Benefits offered by this job

Private Medical Insurance - Enel Med.

Life Insurance.

Multisport Program.

Unlimited annual holiday

Enhanced family leave.

Employee Assistance Programme.

4 volunteering days off.

Referral bonus

Spot Rewards.

EAP Wellbee.

Job summary

Duco is seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team and own threat detection, response and prevention across our AWS-hosted SaaS platform.

You will serve as the internal owner of the SIEM and managed SOC, define detection strategy, lead incident response and ensure run-time security of our AWS estate, while partnering with Engineering, Platform and IT across London and Wroclaw.

Qualifications

• 5+ years of experience in security operations or cloud security engineering.
• Hands-on SIEM experience, including design and tuning of detections and alert response.
• Deep knowledge of AWS security services and architecture (IAM, Organizations, SCPs, CloudTrail, GuardDuty, Security Hub, KMS, VPC).
• Experience with container/Kubernetes runtime security, ideally on Amazon EKS.
• Proven incident response leadership in cloud environments and familiarity with MDR/SOC providers.
• Proficiency in Python or similar scripting language for automation.
• Experience with infrastructure-as-code and threat-informed detection approaches.
• Ability to communicate risk clearly to non-technical stakeholders.

Responsibilities

• Own the run-time security posture of the AWS environment, including IAM, guardrails, logging coverage and remediation of findings.
• Secure corporate environment (Google Workspace, endpoints, SaaS) in partnership with IT and security standards.
• Lead infrastructure vulnerability management and external attack surface programs.
• Coordinate penetration testing from scoping to remediation closure.
• Own the SIEM platform, develop and tune detection use cases, track MITRE ATT&CK coverage.
• Manage the managed SOC relationship, SLAs, and incident response end-to-end.
• Automate security processes through scripting and IaC; deliver security metrics and risk indicators.
• Support audits and client assurance with evidence of security controls.

Skills

SIEM experience

AWS security

Cloud security engineering

Python scripting

Incident response

Kubernetes security

Threat intelligence

Education

AWS Certified Security – Specialty

Tools

AWS IAM

GuardDuty

CloudTrail

KMS

EKS security

SOAR platforms

Job description

Duco is seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team and own threat detection, response and prevention across our AWS-hosted SaaS platform.

You will serve as the internal owner of the SIEM and managed SOC, define detection strategy, lead incident response and ensure run-time security of our AWS estate, while partnering with Engineering, Platform and IT across London and Wroclaw.