Cloud Security Operations Engineer (Remote)

Hmixray; Somerville, Northern (MA, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

DeepHealth is seeking a Security Operations Engineer to build and operate security controls, tooling, and automation across cloud and corporate environments. You will configure, integrate, and maintain the enterprise security stack and develop detection content.

The role works within HIPAA, ISO/IEC 27001, and SOC 2 frameworks, reporting to the Director, Security Operations, with opportunities to contribute to incident response, vulnerability management, and resilience testing.

Qualifications

• 4+ years of hands-on experience in security operations, security engineering, or a comparable technical security role.
• Bachelor's degree in information technology, computer science, cybersecurity, or a related field, or equivalent professional experience.
• 2+ years of hands-on cloud security experience across at least one major cloud provider; Google Cloud Platform and Amazon Web Services preferred.
• 2+ years operating and tuning a SIEM platform, including working with detection content and log sources.
• 1+ year administering Microsoft 365 and Entra ID security controls in a hybrid directory environment.
• Working knowledge of security automation; scripting and infrastructure-as-code, with Terraform preferred.
• Working knowledge of cloud security posture management and preventive controls.
• Working knowledge of container and Kubernetes security, including RBAC and image scanning.
• Working knowledge of secrets management tooling and practices.
• Practical experience with endpoint detection and response tooling.
• Working knowledge of vulnerability management and remediation lifecycle.
• Scripting capability in at least one of: Python, PowerShell, or Bash.
• Familiarity with NIST CSF, ISO/IEC 27001, and SOC 2.
• Able to communicate technical findings clearly to technical and non-technical audiences.
• Able to manage assigned work independently.

Responsibilities

• Build, configure, integrate, and tune the enterprise security tooling stack across cloud and corporate environments.
• Develop and maintain detection content, correlation rules, and response automation within the SIEM and SOAR platform.
• Onboard new log sources and telemetry feeds, validating ingestion completeness and field normalization.
• Administer and tune endpoint detection and response tooling, including policy configuration and coverage validation.
• Integrate security tooling with adjacent platforms through APIs to reduce manual handling and improve data quality.
• Implement policy-as-code and preventive guardrails using cloud policy engines or equivalent frameworks.
• Support cloud security posture management across all cloud environments.
• Harden cloud resources across compute, storage, database, container, and serverless services.

Skills

Security operations

Cloud security

SIEM tuning

Scripting (Python/PowerShell/Bash)

Policy as code

Education

Bachelor's degree in information technology, computer science, cybersecurity, or related field

Tools

Terraform

Microsoft 365

Entra ID

SIEM platform

Job description

DeepHealth is seeking a Security Operations Engineer to build and operate security controls, tooling, and automation across cloud and corporate environments. You will configure, integrate, and maintain the enterprise security stack and develop detection content.

The role works within HIPAA, ISO/IEC 27001, and SOC 2 frameworks, reporting to the Director, Security Operations, with opportunities to contribute to incident response, vulnerability management, and resilience testing.