Cloud Security Operations Analyst

Interfell; United States; Remote; USD 28,000 - 40,000; Full time

Benefits offered by this job

Remote work

9 resilience days

Sabbatical program

Learning & growth resources

Job summary

Interfell is seeking a Cloud Security Operations Analyst for a 100% remote, international post. You will own security operations, threat detection, and incident response focusing on Microsoft Cloud and endpoint security, migrating from CrowdStrike Falcon to Microsoft Defender XDR.

You will collaborate with global teams, manage Azure security controls, implement Zero Trust, Defender for Office 365, DLP, and Purview, and help harden endpoints across Windows, macOS, and Linux.

Qualifications

• Minimum 4+ years in information security with hands-on cloud security and incident response.
• Strong practical knowledge of Microsoft security tools and cloud security concepts.
• Experience with EDR/XDR (CrowdStrike Defender XDR) and security posture management.

Responsibilities

• Monitor, triage, investigate, and contain security alerts from SIEM/XDR and cloud logs.
• Lead migration and setup of Microsoft Defender XDR from CrowdStrike Falcon.
• Configure and audit Azure security controls and enforce Zero Trust practices.
• Enforce security policies for Exchange Online, Teams, SharePoint, and OneDrive.
• Manage vulnerability remediation, patching, and endpoint hardening across OSes.
• Collaborate with IT and external vendors to embed security in initiatives.

Skills

Cloud Security

Incident Response

Azure Security

Entra ID

M365 Security

Defender XDR

CrowdStrike Falcon

Vulnerability Management

Zero Trust

English Proficiency

Tools

PowerShell

Python

Job description

Eligible countries: Mexico, Guatemala, and Peru (Local legal contract according to your country)

Seniority: Mid-Senior / Senior

Reporting to: Director of Technology Operations

Our client is an international non-profit organization with over 30 years of experience operating across 70+ countries. We work to protect biodiversity, fight climate change, and support rural communities worldwide.

The Role

We are looking for a Cloud Security Operations Analyst to act as a key hands-on pillar in our global cybersecurity posture.

In this role, you will take ownership of security operations, threat detection, and incident response, with a strong focus on Microsoft Cloud (Azure, Entra ID, Microsoft 365) and endpoint security. You will also play a key role in transitioning our endpoint security environment from CrowdStrike Falcon to Microsoft Defender XDR.

What You Will Do

• Incident Detection & Response: Monitor, triage, investigate, and contain security alerts coming from SIEM/XDR sources and cloud logs.
• XDR & Migration Project: Manage our current CrowdStrike Falcon environment and help lead the migration and operational setup of Microsoft Defender XDR.
• Cloud Security (Azure & Entra ID): Configure and audit Azure security controls (Defender for Cloud, NSGs, Key Vault, Firewall) and implement Zero Trust identity practices (Conditional Access, PIM, MFA).
• M365 & Data Protection: Enforce security policies across Exchange Online, Teams, SharePoint, and OneDrive using Defender for Office 365, DLP, and Microsoft Purview.
• Vulnerability Management & Hardening: Track CVEs, prioritize patch remediation, maintain endpoint hardening baselines (Windows, macOS, Linux), and assist with penetration test remediation.
• Collaboration & Reporting: Work closely with IT Infrastructure, Enterprise Architecture, and external vendors to embed security across all technical initiatives.

What We Are Looking For

• 4+ years of hands-on experience in Information Security.
• 2+ years focused on Cloud Security and/or Incident Response.
• Solid hands-on expertise in Microsoft Security:
• Azure Security & Architecture fundamentals.
• Microsoft Entra ID (Azure AD), including Conditional Access and PIM.
• Microsoft 365 security tools (Defender for Office 365, DLP, basic Purview).
• EDR/XDR Experience: Operational knowledge of CrowdStrike Falcon and/or Microsoft Defender XDR.
• Solid Foundation in: Networking, Threat Hunting fundamentals, and Vulnerability Management (CVE triage).
• Language: Advanced / Fluent English (written and spoken) — you will collaborate daily with global stakeholders across multiple time zones.

Bonus Points (Nice to Have)

• Certifications: SC-200, AZ-500, CompTIA Security+, CISSP, or GIAC.
• Scripting experience for automation using PowerShell or Python.
• Familiarity with industry frameworks and standards (NIST, CIS benchmarks, ISO 27001, GDPR).
• Exposure to Cloud Security Posture Management (CSPM) tools.

What We Offer

• 100% Remote Work with flexibility.
• Full Local Benefits: Employment contract aligned with the labor regulations and benefits of your home country.
• Purpose-Driven Work: Directly contribute to global environmental and human rights impact.
• Global Exposure: Collaborate with diverse, international cross-functional teams across 70+ countries.

Work Schedule: Monday through Friday, 8:00 a.m. to 5:00 p.m. Guatemala Time

Salary Range: 2,500–3,600 USD. We also welcome salary requests.

• 9 “resilience” days (one Friday or Monday off to enjoy 9 long weekends per year).
• Sabbatical (After 7 years of continuous service, employees can take a 3-month break, with 1 month paid. After 14 years, 2 months are paid. After 21 years, 3 months are paid).
• Working from Abroad Policy (This policy allows employees to work from anywhere in the world for up to 8 weeks per year).
• Access to LinkedIn Learning.
• Access to the Busu Language Learning App.
• Performance evaluation program with annual merit-based raises.
• Annual country-specific inflation assessment with salary adjustments as needed.