Cloud Security Engineer & Incident Response Lead

Hillpointe; Winter Park (FL); On-site; USD 110,000 - 170,000; Full time

Job summary

Hillpointe is seeking a Cybersecurity Engineer to manage day-to-day security operations in a fully cloud-based environment. This role drives the approved security agenda, oversees MDR, and leads vulnerability remediation with system owners while coordinating with MSPs and vendors.

The successful candidate will own detection and response across cloud identity, endpoints, and infrastructure, act as incident commander for security events, and guide incident response planning, metrics, and reporting

Qualifications

• 4+ years of hands-on cybersecurity operations, cloud environment
• Experience with security monitoring and SIEM platforms, from detection to disposition
• Practical experience with endpoint detection and response and cloud-native security tooling
• Knowledge of cloud identity security: conditional access, MFA, privileged access management
• Experience running a vulnerability management program and driving remediation
• Participation in audits/compliance programs such as SOC 2, ISO 27001, or NIST CSF
• Ability to lead incidents calmly under pressure with clear documentation
• Strong written communication for policies, runbooks, findings, and summaries
• Judgment in escalation and independent handling of security issues

Responsibilities

• Own detection and response across cloud identity, endpoint, email, and cloud infrastructure; triage, containment, eradication, recovery
• Serve as primary incident responder and incident commander for security events with cross-team coordination
• Maintain the incident response plan with tabletop exercises and post-incident reviews
• Develop and tune detection rules, alert logic, and automated response playbooks
• Build and maintain runbooks for recurring incident types

Skills

Security monitoring & SIEM

Incident response leadership

Cloud identity security

Vulnerability management

Audits & compliance (SOC 2, ISO 27001)

Security governance & runbooks

Written communication

Tools

SIEM platforms

EDR tools

CI/CD security tooling

IAM / PAM concepts

Job description

Hillpointe is seeking a Cybersecurity Engineer to manage day-to-day security operations in a fully cloud-based environment. This role drives the approved security agenda, oversees MDR, and leads vulnerability remediation with system owners while coordinating with MSPs and vendors.

The successful candidate will own detection and response across cloud identity, endpoints, and infrastructure, act as incident commander for security events, and guide incident response planning, metrics, and reporting