Senior Cloud Security Operations Engineer (Hybrid/Remote)

Svitla Systems, Inc.; Polska; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

US and EU projects

Competitive compensation

Regular performance appraisals

Remote or office work option

Bonuses for talks and articles

Generous time off

Personalized learning programs

Free tech webinars and meetups

Job summary

Svitla Systems, Inc. is seeking a Senior Cloud Security Operation Analyst for a full-time role in Poland. You will join a team focused on improving cloud security, incident response, and collaboration with DevOps, architects, and stakeholders to strengthen security posture.

The role requires hands-on experience with cloud platforms, security monitoring, automation, and scripting, with overlap hours until 7:00 PM CET. 40-hour work week.

Qualifications

• Degree in computer science, 5 to 10 years of experience, or an equivalent combination of training and experience.
• Security certifications: CISSP, CSSLP, CEH, Security+, GIAC, or demonstrated equivalent security knowledge and experience.
• Cloud security certifications or demonstrated equivalent security knowledge and experience.
• Experience in cloud cybersecurity operations, cloud incident response, and cloud security.
• Hands-on knowledge of cloud platforms.
• Experience with cloud-native security tools.
• Ability to investigate security events, document findings, and communicate recommendations clearly.
• Proficiency in data analysis and querying using scripting languages and tools such as Python, PowerShell, Bash, YARA-L, SQL, KQL, SPL, or others.
• Experience with SIEM, Endpoint Detection and Response tools, Network Security tools, Security Orchestration, and Cloud Posture Management tools.
• Knowledge of information security risks, frameworks, and industry best practices.
• Ability to work independently and collaborate effectively with technical and non-technical stakeholders.
• Hands-on experience with security orchestration and automation.
• Hands-on security experience with implementation and support of CI/CD pipelines, Secret Management solutions, WAF, Cloud Firewall rules management, Kubernetes, Containers, API gateways, Infrastructure as Code, Compliance as Code, cloud policies, and GitOps.
• Knowledge of development languages: at least one or two of the following: Java, Node.js, C#, .NET.

Responsibilities

• Identify and drive resolution of dangerous cloud misconfigurations, overly permissive access policies, and identity-based vulnerabilities.
• Protect our organization's cloud-native infrastructure and digital assets by monitoring real-time signals and investigating threats.
• Review and validate cloud security controls, including identity and access management, network security, logging, encryption, and workload protection.
• Review security alerts, track log data, and tune detection rules using cloud-native platforms.
• Investigate suspicious activities, isolate compromised cloud resources, and mitigate active incursions or data exposures.
• Support cloud incident response activities, including containment, evidence collection, root cause analysis, and post-incident documentation.
• Proactively search cloud environments for hidden indicators of compromise and unusual activities.
• Configure and Support Cloud Security Services and hardening configuration.
• Support compliance, audit, and reporting activities related to cloud security operations.
• Mentor and enable stakeholders on cloud security to uplift posture and address technical debt.

Skills

Cloud platforms

Security monitoring

Incident response

Python

PowerShell

Bash

SQL

KQL

YARA-L

CI/CD security

GitOps

Kubernetes

Containers

WAF

Cloud Firewall

API gateways

Security frameworks

Java

Node.js

C#

.NET

Education

Degree in Computer Science

Tools

SIEM

EDR

SOAR

Cloud-native security tools

GitOps tooling

Kubernetes

Containers

API gateways

WAF

Cloud Posture Management

Job description

Svitla Systems, Inc. is seeking a Senior Cloud Security Operation Analyst for a full-time role in Poland. You will join a team focused on improving cloud security, incident response, and collaboration with DevOps, architects, and stakeholders to strengthen security posture.

The role requires hands-on experience with cloud platforms, security monitoring, automation, and scripting, with overlap hours until 7:00 PM CET. 40-hour work week.