SENIOR CLOUD SECURITY OPERATION ANALYST

Svitla Systems, Inc.; Polska; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

US and EU projects

Competitive compensation

Regular performance appraisals

Remote or office work option

Bonuses for talks and articles

Generous time off

Personalized learning programs

Free tech webinars and meetups

Job summary

Svitla Systems, Inc. is seeking a Senior Cloud Security Operation Analyst for a full-time role in Poland. You will join a team focused on improving cloud security, incident response, and collaboration with DevOps, architects, and stakeholders to strengthen security posture.

The role requires hands-on experience with cloud platforms, security monitoring, automation, and scripting, with overlap hours until 7:00 PM CET. 40-hour work week.

Qualifications

• Degree in computer science, 5 to 10 years of experience, or an equivalent combination of training and experience.
• Security certifications: CISSP, CSSLP, CEH, Security+, GIAC, or demonstrated equivalent security knowledge and experience.
• Cloud security certifications or demonstrated equivalent security knowledge and experience.
• Experience in cloud cybersecurity operations, cloud incident response, and cloud security.
• Hands-on knowledge of cloud platforms.
• Experience with cloud-native security tools.
• Ability to investigate security events, document findings, and communicate recommendations clearly.
• Proficiency in data analysis and querying using scripting languages and tools such as Python, PowerShell, Bash, YARA-L, SQL, KQL, SPL, or others.
• Experience with SIEM, Endpoint Detection and Response tools, Network Security tools, Security Orchestration, and Cloud Posture Management tools.
• Knowledge of information security risks, frameworks, and industry best practices.
• Ability to work independently and collaborate effectively with technical and non-technical stakeholders.
• Hands-on experience with security orchestration and automation.
• Hands-on security experience with implementation and support of CI/CD pipelines, Secret Management solutions, WAF, Cloud Firewall rules management, Kubernetes, Containers, API gateways, Infrastructure as Code, Compliance as Code, cloud policies, and GitOps.
• Knowledge of development languages: at least one or two of the following: Java, Node.js, C#, .NET.

Responsibilities

• Identify and drive resolution of dangerous cloud misconfigurations, overly permissive access policies, and identity-based vulnerabilities.
• Protect our organization's cloud-native infrastructure and digital assets by monitoring real-time signals and investigating threats.
• Review and validate cloud security controls, including identity and access management, network security, logging, encryption, and workload protection.
• Review security alerts, track log data, and tune detection rules using cloud-native platforms.
• Investigate suspicious activities, isolate compromised cloud resources, and mitigate active incursions or data exposures.
• Support cloud incident response activities, including containment, evidence collection, root cause analysis, and post-incident documentation.
• Proactively search cloud environments for hidden indicators of compromise and unusual activities.
• Configure and Support Cloud Security Services and hardening configuration.
• Support compliance, audit, and reporting activities related to cloud security operations.
• Mentor and enable stakeholders on cloud security to uplift posture and address technical debt.

Skills

Cloud platforms

Security monitoring

Incident response

Python

PowerShell

Bash

SQL

KQL

YARA-L

CI/CD security

GitOps

Kubernetes

Containers

WAF

Cloud Firewall

API gateways

Security frameworks

Java

Node.js

C#

.NET

Education

Degree in Computer Science

Tools

SIEM

EDR

SOAR

Cloud-native security tools

GitOps tooling

Kubernetes

Containers

API gateways

WAF

Cloud Posture Management

Job description

Svitla Systems Inc. is looking for a Senior Cloud Security Operation Analyst for a full-time position (40 hours per week) in Poland. Our client is a Canadian courier and package delivery company. The company delivers nearly 500,000 parcels daily across Canada thanks to a technological platform offering more than 3500 optimized routes to almost 500 independent delivery employees. The company's services are provided via a digital order tracking platform that lets suppliers and logistics service dealers accept bulk orders, track parcel delivery routes, check and communicate shipment details, manage bills and invoices, and fasten the cargo shipment processes by partnering with certified transporters, enabling clients to request and enjoy secured transportation of their parcels and cargos by being able to track them in real-time. The client’s customers include Amazon, Pitney Bowes, and Landmark Global, which handle shipping for Etsy and eBay.

You will join a team to contribute to the continuous improvement of cloud security and cloud security incident response practices in a dynamic, growing organization. You will work in an environment where ideas are welcomed, contributions are recognized, and cross-functional collaboration enables teams to achieve ambitious outcomes. If you are motivated to drive change and partner with developers, DevOps, system administrators, architects, and cybersecurity stakeholders, we would like to hear from you. This role is ideal for someone who is hands-on, curious, analytical, and comfortable working with cloud platforms, security monitoring, automation, orchestration and response tools, and scripting, as well as collaborating with cross-functional technical teams.

This role requires working hours with overlap till 7:00 PM CET.

Requirements

• Degree in computer science, 5 to 10 years of experience, or an equivalent combination of training and experience.
• Security Certification(s) required: CISSP, CSSLP, CEH, Security+, GIAC, or demonstrated equivalent security knowledge and experience.
• Cloud or Vendor-specific security certification(s) or demonstrated equivalent security knowledge and experience.
• Experience in cloud cybersecurity operations, cloud incident response, and cloud security.
• Hands-on knowledge of cloud platforms.
• Experience with cloud-native security tools.
• Ability to investigate security events, document findings, and communicate recommendations clearly.
• Proficiency in data analysis and querying using scripting languages and tools such as Python, PowerShell, Bash, YARA-L, SQL, KQL, SPL, or others.
• Experience with SIEM, Endpoint Detection and Response tools, Network Security tools, Security Orchestration, and Cloud Posture Management tools.
• Knowledge of information security risks, frameworks, and industry best practices.
• Ability to work independently and collaborate effectively with technical and non-technical stakeholders.
• Hands-on experience with security orchestration and automation.
• Hands-on security experience with implementation and support of CI/CD pipelines, Secret Management solutions, WAF, Cloud Firewall rules management, Kubernetes, Containers, API gateways, Infrastructure as Code, Compliance as Code, cloud policies, and GitOps.
• Knowledge of development languages: at least one or two of the following: Java, Node.js, C#, .NET.

Responsibilities

• Identify and drive resolution of dangerous cloud misconfigurations, overly permissive access policies, and identity-based vulnerabilities.
• Protect our organization's cloud-native infrastructure and digital assets by monitoring real-time signals and investigating threats.
• Review and validate cloud security controls, including identity and access management, network security, logging, encryption, and workload protection.
• Review security alerts, track log data, and tune detection rules using cloud-native platforms.
• Investigate suspicious activities, isolate compromised cloud resources, and mitigate active incursions or data exposures.
• Support cloud incident response activities, including containment, evidence collection, root cause analysis, and post-incident documentation.
• Proactively search cloud environments for hidden indicators of compromise and unusual activities.
• Configure and Support Cloud Security Services and hardening configuration.
• Support compliance, audit, and reporting activities related to cloud security operations.
• Mentor and enable stakeholders on cloud security to uplift posture and address technical debt.

WE OFFER

• US and EU projects based on advanced technologies.
• Competitive compensation based on skills and experience.
• Regular performance appraisals to support your growth.
• Flexibility in workspace, either remote or our welcoming office.
• Bonuses for article writing, public talks, and other activities.
• Generous time off, including vacation, national holidays, sick leaves, and family days.
• Personalized learning programs tailored to your interests and skill development.
• Free tech webinars and meetups organized by Svitla.
• Regular corporate online activities.
• Awesome team and a friendly, supportive community!