Security Engineer: Cloud & Incident Response

Certinia; Austin (TX); On-site; GBP 60,000 - 90,000; Full time

Job summary

Certinia in the United Kingdom is seeking a Security Engineer to bridge triage and security architecture, moving beyond monitoring to active investigation and automation across cloud platforms.

You will help maintain SOC capabilities, perform offensive security tasks, and collaborate with senior engineers. The role reports to the Head of Information Security and offers growing responsibility in cloud security and threat response.

Qualifications

• 1–3 years hands-on experience in Information Security, SOC, or a related technical field.
• Deep understanding of networking (TCP/IP), OS (Linux/Windows/macOS), and web app security (OWASP Top 10).
• Practical experience securing resources in at least one major cloud provider (AWS, Azure, or GCP).
• Proficiency in Python, Bash, or similar languages for automation and parsing logs.
• Demonstrated ability to investigate security events, analyze logs, and understand MITRE ATT&CK framework.
• Ability to explain security risks to non-security colleagues (e.g., developers or IT staff).

Responsibilities

• Security Operations & Threat Management Support.
• Perform deep‑dive investigations and root cause analysis of alerts.
• Execute phases of Incident Response independently, including containment and eradication.
• Execute Phishing Triage, analyzing reported emails and validating threats.
• Assist day‑to‑day monitoring of the SIEM platform and triage events.
• Perform proactive threat hunting using intelligence feeds for IoCs.
• Triage reports to the public Bug Bounty Program.
• Offensive security: run internal penetration tests with limited supervision.
• Support red team exercises and simulate adversary behaviors.
• Design and launch phishing simulations to identify training gaps.
• Implement and maintain IAM policies, security groups, and encryption in cloud environments.
• Analyze CNAPP dashboards to validate alerts and detect threats.
• Write scripts to automate IR/DR steps and create detections.
• Review internal tools and provide feedback to development teams.

Skills

Security operations

Threat hunting

Incident response

Python

Bash

Cloud security

Networking

IAM policies

Tools

SIEM

Docker

Kubernetes

CNAPP dashboards

Job description

Certinia in the United Kingdom is seeking a Security Engineer to bridge triage and security architecture, moving beyond monitoring to active investigation and automation across cloud platforms.

You will help maintain SOC capabilities, perform offensive security tasks, and collaborate with senior engineers. The role reports to the Head of Information Security and offers growing responsibility in cloud security and threat response.