SENIOR CLOUD SECURITY OPERATION ANALYST

Svitla Systems, Inc.; Poland; Hybrid; PLN 240,000 - 360,000; Full time

Benefits offered by this job

Remote or office flexibility

Bonuses for articles and talks

Generous time off

Learning programs and webinars

Job summary

Svitla Systems Inc. in Poland is seeking a Senior Cloud Security Operation Analyst to join full-time. You will enhance cloud security, drive incident response, and partner with DevOps, developers, and security stakeholders.

The role requires hands-on work with cloud platforms, SIEM, CI/CD security, automation, and scripting. You will mentor teams and help implement secure cloud architectures, policy governance, and incident playbooks across projects.

Qualifications

• Degree in computer science or equivalent.
• 5–10 years of experience in cloud security operations.
• CISSP, CSSLP, CEH, Security+, GIAC or equivalent certifications.
• Hands-on with cloud platforms and security tooling.
• Experience with CI/CD pipelines, IaC, Kubernetes, and cloud governance.

Responsibilities

• Identify and drive resolution of misconfigurations and overly permissive access.
• Monitor cloud environments and investigate threats to protect assets.
• Review IAM, network security, logging, encryption, and workload protection.
• Tune detection rules and analyze logs using cloud-native platforms.
• Contain incidents, perform root cause analysis, and document findings.
• Proactively search for indicators of compromise in cloud environments.
• Configure and support cloud security services and hardening controls.
• Support audit, compliance, and reporting activities for cloud security.
• Mentor stakeholders to uplift cloud security postures and reduce tech debt.

Skills

Cloud security

Scripting (Python)

CI/CD security

Stakeholder communication

Education

BSc in Computer Science

Tools

SIEM

EDR

Cloud-native tools

Job description

Svitla Systems Inc. is looking for a Senior Cloud Security Operation Analyst for a full-time position (40 hours per week) in Poland. Our client is a Canadian courier and package delivery company. The company delivers nearly 500,000 parcels daily across Canada thanks to a technological platform offering more than 3500 optimized routes to almost 500 independent delivery employees. The company's services are provided via a digital order tracking platform that lets suppliers and logistics service dealers accept bulk orders, track parcel delivery routes, check and communicate shipment details, manage bills and invoices, and fasten the cargo shipment processes by partnering with certified transporters, enabling clients to request and enjoy secured transportation of their parcels and cargos by being able to track them in real-time. The client’s customers include Amazon, Pitney Bowes, and Landmark Global, which handle shipping for Etsy and eBay.

You will join a team to contribute to the continuous improvement of cloud security and cloud security incident response practices in a dynamic, growing organization. You will work in an environment where ideas are welcomed, contributions are recognized, and cross-functional collaboration enables teams to achieve ambitious outcomes. If you are motivated to drive change and partner with developers, DevOps, system administrators, architects, and cybersecurity stakeholders, we would like to hear from you. This role is ideal for someone who is hands-on, curious, analytical, and comfortable working with cloud platforms, security monitoring, automation, orchestration and response tools, and scripting, as well as collaborating with cross-functional technical teams.

This role requires working hours with overlap till 7:00 PM CET.

Requirements

• Degree in computer science, 5 to 10 years of experience, or an equivalent combination of training and experience.
• Security Certification(s) required: CISSP, CSSLP, CEH, Security+, GIAC, or demonstrated equivalent security knowledge and experience.
• Cloud or Vendor-specific security certification(s) or demonstrated equivalent security knowledge and experience.
• Experience in cloud cybersecurity operations, cloud incident response, and cloud security.
• Hands-on knowledge of cloud platforms.
• Experience with cloud-native security tools.
• Ability to investigate security events, document findings, and communicate recommendations clearly.
• Proficiency in data analysis and querying using scripting languages and tools such as Python, PowerShell, Bash, YARA-L, SQL, KQL, SPL, or others.
• Experience with SIEM, Endpoint Detection and Response tools, Network Security tools, Security Orchestration, and Cloud Posture Management tools.
• Knowledge of information security risks, frameworks, and industry best practices.
• Ability to work independently and collaborate effectively with technical and non-technical stakeholders.
• Hands-on experience with security orchestration and automation.
• Hands-on security experience with implementation and support of CI/CD pipelines, Secret Management solutions, WAF, Cloud Firewall rules management, Kubernetes, Containers, API gateways, Infrastructure as Code, Compliance as Code, cloud policies, and GitOps.
• Knowledge of development languages: at least one or two of the following: Java, Node.js, C#, .NET.

Responsibilities

• Identify and drive resolution of dangerous cloud misconfigurations, overly permissive access policies, and identity-based vulnerabilities.
• Protect our organization's cloud-native infrastructure and digital assets by monitoring real-time signals and investigating threats.
• Review and validate cloud security controls, including identity and access management, network security, logging, encryption, and workload protection.
• Review security alerts, track log data, and tune detection rules using cloud-native platforms.
• Investigate suspicious activities, isolate compromised cloud resources, and mitigate active incursions or data exposures.
• Support cloud incident response activities, including containment, evidence collection, root cause analysis, and post-incident documentation.
• Proactively search cloud environments for hidden indicators of compromise and unusual activities.
• Configure and Support Cloud Security Services and hardening configuration.
• Support compliance, audit, and reporting activities related to cloud security operations.
• Mentor and enable stakeholders on cloud security to uplift posture and address technical debt.

We offer

• US and EU projects based on advanced technologies.
• Competitive compensation based on skills and experience.
• Regular performance appraisals to support your growth.
• Flexibility in workspace, either remote or our welcoming office.
• Bonuses for article writing, public talks, and other activities.
• Generous time off, including vacation, national holidays, sick leaves, and family days.
• Personalized learning programs tailored to your interests and skill development.
• Free tech webinars and meetups organized by Svitla.
• Regular corporate online activities.
• Awesome team and a friendly, supportive community!

Why join Svitla

Svitla Systems is a global digital solutions company headquartered in the U.S. and operating across the Americas, Europe, Asia, and APAC. Since 2003, we have served a wide range of clients - from innovative start-ups to Fortune 500 companies. Our success is built on partnership. By integrating seamlessly with clients' teams, we create lasting collaborations that drive real results. We are strong advocates of workplace flexibility, remote culture, individual approach to professional and personal growth.

Our global mission is to build a business that contributes to wellbeing of our partners, personnel, and their families, improves our communities, and makes a lasting difference in the world. Together, we are coding a brighter tomorrow - and living it.