Security Operations Engineer — Cloud & Automation

DeepHealth; United States; Remote; USD 110,000 - 120,000; Full time

Job summary

DeepHealth is seeking a Security Operations Engineer to build and operate security controls, tooling, and automation across cloud and corporate environments. You will configure, integrate, and maintain the enterprise security stack, develop detection content, and automate security operations tasks for repeatability and auditable controls.

Working under the Director of Security Operations, you will validate controls, provide remediation guidance, and support incident detection and response in a

Qualifications

• 4+ years in security operations, engineering, or similar role.
• Bachelor's degree in IT, CS, cybersecurity, or related field (or equivalent experience).
• 2+ years cloud security across at least one major provider (GCP/AWS preferred).
• 2+ years operating and tuning a SIEM platform with detection content.
• 1+ year administering Microsoft 365 and Entra ID security in a hybrid directory.
• Scripting knowledge (Python/PowerShell/Bash) required.
• Familiarity with security frameworks (NIST, ISO 27001, SOC 2).
• Experience with security automation and infrastructure-as-code (Terraform preferred).
• Experience in healthcare/regulatory environments (HIPAA) preferred.

Responsibilities

• Build, configure, integrate, and tune security tooling across cloud and corporate environments.
• Develop and maintain detection content, correlation rules, and response automation in SIEM/SOAR.
• Onboard new log sources, validate ingestion, parsing, and field normalization.
• Administer and tune EDR tooling, including policy configuration and coverage validation.
• Integrate security tooling with platforms via APIs to reduce manual work.
• Implement guardrails and baselines across GCP, AWS, and Azure.
• Build security automation and IaC using Terraform or equivalent.

Skills

Security operations

Security engineering

Cloud security

SIEM tuning

Detection content

Scripting

HIPAA knowledge

NIST/ISO SOC2 familiarity

Incident response

Vulnerability management

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Terraform

Microsoft 365

Entra ID

Cloud platforms (GCP/AWS/Azure)

Job description

DeepHealth is seeking a Security Operations Engineer to build and operate security controls, tooling, and automation across cloud and corporate environments. You will configure, integrate, and maintain the enterprise security stack, develop detection content, and automate security operations tasks for repeatability and auditable controls.

Working under the Director of Security Operations, you will validate controls, provide remediation guidance, and support incident detection and response in a