Remote Cloud Security & SIEM Engineer (Wazuh/AWS)

Tech Net Inc; Folsom (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Technet is seeking a hands-on Cloud Security & SIEM Engineer to deploy, configure, and maintain the cybersecurity architecture for an energy-sector utility data platform hosted in AWS. In this role, you will lead the implementation of a high-availability Wazuh SIEM cluster in a dedicated, tenant-isolated AWS VPC and drive telemetry pipelines across GuardDuty, Security Hub, CloudTrail, and EDR data.

The role emphasizes security monitoring, CSPM automation with Prowler, and integration of

Qualifications

• 4+ years in Cloud Security Engineering, SIEM Admin, or SecOps in AWS environments.

Responsibilities

• Deploy, configure, and maintain a HA Wazuh SIEM cluster in a dedicated AWS VPC.
• Architect centralized telemetry ingestion using EventBridge, SQS, CloudTrail, VPC Flow Logs, and S3 server access logs.
• Ingest CrowdStrike Falcon telemetry into Wazuh for endpoint-cloud correlation.
• Develop custom parsers, decoders, and alert rules for boundary systems (GoAnywhere, Dell Boomi, Salesforce).
• Automate Prowler CSPM scans and AWS Config rules mapped to SOC 2 II, CIS AWS Foundations, and NIST 800-53.
• Automate vulnerability scans and Security Configuration Assessments (SSM).
• Assist MFA deployment and auditing across AWS Directory Service and VPN endpoints.

Skills

Wazuh

ELK/OpenSearch

Python

Bash

JSON/YAML

AWS Security

GuardDuty

Tools

GoAnywhere MFT

Dell Boomi

Salesforce API

Prowler CSPM

CrowdStrike Falcon

Job description

Technet is seeking a hands-on Cloud Security & SIEM Engineer to deploy, configure, and maintain the cybersecurity architecture for an energy-sector utility data platform hosted in AWS. In this role, you will lead the implementation of a high-availability Wazuh SIEM cluster in a dedicated, tenant-isolated AWS VPC and drive telemetry pipelines across GuardDuty, Security Hub, CloudTrail, and EDR data.

The role emphasizes security monitoring, CSPM automation with Prowler, and integration of