Hybrid Cloud Security Engineer - Threat Hunting & IR (AWS)

Cyberjobs; United States; Hybrid; USD 140,000 - 150,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Tyto Athene seeks an experienced Cloud Security Engineer to protect a major Federal client’s cloud footprint. You’ll lead cloud threat hunting, incident response, and PKI-enabled monitoring in a large enterprise SOC.

Expect hybrid work with possible DC site time and focus on AWS, with Azure and Google Cloud expertise as a plus. You’ll develop cloud incident response playbooks, tune SIEM integrations, and drive KPI-driven security improvements while collaborating across teams to ensure full

Qualifications

• Eight years of cyber security experience, with six in cloud security engineering
• Proven cloud threat hunting in SaaS/PaaS/IaaS environments
• Experience leading cloud incident response efforts
• Hands-on expertise across AWS, Azure and Google Cloud
• Bachelor’s degree or equivalent experience
• Strong SOC teamwork and clear communication

Responsibilities

• Perform cloud threat hunting and incident response activities
• Review cloud logs and develop context-rich alerts
• Lead cloud incident response during events
• Develop cloud incident response playbooks
• Collaborate with stakeholders for cloud workload visibility
• Onboard cloud logs to SIEM and tune monitoring use cases
• Optimize security tools to maximize blocking with low FP
• Contribute KPIs to monitor function health

Skills

Cloud threat hunting

Incident response leadership

AWS experience

Azure experience

GCP experience

Security monitoring

Threat detection tuning

Cloud SOC operations

Verbal/written communication

Education

Bachelor's degree

Alternate relevant experience

Tools

AWS

Azure

Google Cloud

SIEM

EDR

Job description

Tyto Athene seeks an experienced Cloud Security Engineer to protect a major Federal client’s cloud footprint. You’ll lead cloud threat hunting, incident response, and PKI-enabled monitoring in a large enterprise SOC.

Expect hybrid work with possible DC site time and focus on AWS, with Azure and Google Cloud expertise as a plus. You’ll develop cloud incident response playbooks, tune SIEM integrations, and drive KPI-driven security improvements while collaborating across teams to ensure full