Security Engineer: Threat Hunting & IR in Cloud

Certinia; Austin (TX); Remote; USD 90,000 - 135,000; Full time

Job summary

Certinia is seeking a Security Engineer to perform hands-on security operations, investigations, and incident handling across cloud and on-premises environments. You will contribute to threat hunting, phishing simulations, and automation of IR/DR steps while collaborating with senior engineers on complex threat scenarios.

Responsibilities include securing AWS/Azure/GCP resources, conducting internal pen tests, and supporting red team exercises under guidance from the Head of Information Security.

Qualifications

• 1–3 years of hands-on experience in information security, SOC, or a related technical field.
• Deep understanding of networking (TCP/IP), operating systems (Linux/Windows/macOS), and web application security (OWASP Top 10).
• Practical experience securing resources in at least one major cloud provider (AWS, Azure, or GCP).
• Proficiency in Python, Bash, or similar languages for automation and parsing logs.
• Demonstrated ability to investigate security events, analyze logs, and understand the lifecycle of a cyber attack (MITRE ATT&CK framework).

Responsibilities

• Perform deep-dive investigations and root cause analysis of alerts.
• Execute specific phases of Incident Response (IR) procedures independently, including containment, eradication, and post-incident review.
• Execute the Phishing Triage process, analyzing reported emails, and validating threats.
• Assist with the day-to-day monitoring of the SIEM (Security Information and Event Management) platform, including triage of incoming events.
• Perform proactive threat hunting using intelligence feeds to search for indicators of compromise (IoCs) within the network and cloud environments.
• Perform initial triage of incoming reports to our public Bug Bounty Program.
• Execute internal penetration tests on applications and cloud infrastructure with limited supervision, following established methodologies.
• Support red team exercises by executing specific attack vectors and helping to simulate adversary behaviors.
• Design and launch phishing simulations, analyzing the results to identify training gaps and improve human awareness.
• Implement and maintain specific security controls within cloud environments (AWS, Azure, GCP), such as IAM policies, security groups, and storage encryption configurations.
• Assist in analyzing CNAPP dashboards to validate incoming alerts and detect legitimate threats.
• Write scripts (e.g., Python, Bash) to automate IR/DR steps, accelerate log analysis, or create custom detections or analyzers.
• Perform security reviews of internal tools and new features, providing actionable feedback to development teams.

Skills

Python

Bash

Cloud security

Incident response

Tools

AWS

Azure

GCP

Job description

Certinia is seeking a Security Engineer to perform hands-on security operations, investigations, and incident handling across cloud and on-premises environments. You will contribute to threat hunting, phishing simulations, and automation of IR/DR steps while collaborating with senior engineers on complex threat scenarios.

Responsibilities include securing AWS/Azure/GCP resources, conducting internal pen tests, and supporting red team exercises under guidance from the Head of Information Security.