Security Engineer - Cloud Threat Detection

val's services; Charlotte (NC); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Hybrid work arrangement

In-office three days/week

Job summary

val's services in Charlotte, NC is seeking a Senior Security Engineer specializing in Cloud Threat Detection to design and deploy detection content for AWS and GCP, integrate cloud telemetry into SIEM, and map techniques to MITRE ATT&CK. You will participate in adversary simulations and help create SOPs and guides to empower SOC analysts.

The role requires 5+ years in cybersecurity with hands-on security operations, incident response, and threat detection in cloud environments, plus strong

Qualifications

• 5+ years in cybersecurity with hands-on SOC, IR and threat detection in AWS/GCP.
• Proficiency with cloud-native security tools and SIEM integration.
• Ability to create operational documentation and train teams.

Responsibilities

• Design and deploy detection content for AWS and GCP threats.
• Integrate cloud telemetry into SIEM platforms and tune detections.
• Map techniques to MITRE ATT&CK and support adversary simulations.

Skills

Cloud threat detection

Security operations

Incident response

MITRE ATT&CK mapping

Communication skills

Tools

Splunk

PowerShell

Python

SOAR platforms

Job description

Role:

Senior Security Engineer specializing in Cloud Threat Detection

Responsibilities:

Design and deploy detection content for AWS and GCP threats, integrate cloud telemetry into SIEM platforms, develop and tune detections, map techniques to MITRE ATT&CK, participate in adversary simulations, create SOPs and investigation guides, train SOC analysts, and provide escalation support.

Qualifications & Skills:

5+ years in cybersecurity with hands-on experience in security operations, incident response, and threat detection in AWS and GCP environments. Proficiency with cloud-native security tools, SIEM integration, and investigation of cloud telemetry. Strong communication skills and ability to develop operational documentation.

Preferred Skills & Certifications:

Experience with Splunk, threat hunting, scripting (Python, PowerShell), SOAR platforms, and knowledge of adversary behaviors. Certifications like AWS Security Specialty, GCP Security Engineer, and Splunk Certified Architect are advantageous.

Additional Details:

Collaboration with cloud and security teams, on-call support rotations, and hybrid work arrangement with in-office presence three days a week. Must be authorized to work in the US without sponsorship.