Cloud Security Detection & Response Engineer III

Veeam; San Jose (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Paid parental leave

Unlimited PTO

Medical, dental, vision coverage

401(k) retirement plan with matching

Job summary

Veeam is seeking a Security Engineer III to own detection engineering and the cloud security surface across our multi‑cloud estate. You will design and build a security data lake ingest telemetry from Azure, AWS, SaaS, and endpoints, shape detections in code, and automate response and triage to reduce MTTD and MTTR.

You will harden cloud environments, implement Terraform controls, and drive remediation with partner teams.

Qualifications

• Scripting and automation ability in Python or a comparable language, enough to build and maintain tooling.
• Strong cloud security fundamentals: RBAC and least privilege, secret and key management, egress control, and public-exposure prevention.
• Production Terraform experience. You’ve written and maintained modules other teams consume, and you know why a security control belongs in code rather than in a runbook.
• Real operational depth in both Azure and AWS: identity models, logging and audit sources, network boundaries, and where each provider’s defaults leave you exposed.
• Demonstrated detection building. You’ve written detections against real telemetry, tuned them against real false positives, and can explain a specific rule you shipped and how you validated it.
• 5+ years in security engineering, cloud operations, or detection engineering, with recent hands‑on ownership of production cloud security work.
• Fluency in at least one query language for security data (KQL, SQL, or equivalent) and the judgment to know when a query problem is actually a data-model problem.
• A track record of shipping production code or infrastructure you can point to. This is a hands‑on building role, not an advisory one.
• Microsoft Sentinel at production scale: analytics rules, automation rules, ingestion cost management, and multi-workspace design.
• Wiz experience, including turning posture and attack-path findings into an owned remediation workflow.
• Incident response experience in a cloud environment, on‑call or as an investigator.
• Kubernetes and container security exposure (AKS, EKS) and runtime detection for containerized workloads.
• Security data lake or SIEM migration experience, including cost and retention tradeoffs.
• Familiarity with regulated‑industry audit expectations (SOC 2 Type 2, ISO 27001, FedRAMP, HITRUST) and what auditors want from logging and monitoring controls.
• Relevant certifications (Azure or AWS security specialty, GCIA, GCDA, or similar)

Responsibilities

• Own the detection engineering and cloud security surface end to end: pipelines, detections, and guardrails in Azure/AWS.
• Design and build the security data lake: telemetry from Azure, AWS, SaaS, endpoints; normalize, retain, and control cost.
• Write, tune, and version-control detections as code; manage full lifecycle from hypothesis to deployment and retirement.
• Build the response side with detections: automate triage, enrich, and reduce MTTD/MTTR.
• Harden Azure and AWS environments: RBAC, secret management, egress control, logging, and public exposure across tenants/accounts.
• Deliver cloud security controls as Terraform modules; ensure fixes land in code for all environments.
• Turn posture findings into a prioritized remediation queue and close gaps with partner teams.
• Run detection coverage assessments against threat frameworks and close gaps relevant to the platform.

Skills

Python scripting

Cloud security fundamentals

Terraform

Azure & AWS

Detection engineering

5+ years security experience

KQL/SQL

Hands-on coding/infrastructure

Microsoft Sentinel

Wiz

Incident response

Kubernetes security

Data lake / SIEM migration

Regulated audit familiarity

Security certifications

Education

Azure or AWS security specialty

GCIA

GCDA

Tools

Kubernetes (AKS, EKS)

Microsoft Sentinel

Wiz

Terraform

GitHub Actions

Azure DevOps

Job description

Veeam is seeking a Security Engineer III to own detection engineering and the cloud security surface across our multi‑cloud estate. You will design and build a security data lake ingest telemetry from Azure, AWS, SaaS, and endpoints, shape detections in code, and automate response and triage to reduce MTTD and MTTR.

You will harden cloud environments, implement Terraform controls, and drive remediation with partner teams.