Security Operations Lead: Cloud & CNAPP Incident Response

Pelico; Miami (FL); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Meaningful equity

Competitive salary

Hybrid work model

Health, dental, and vision

Exposure to complex ops

Team culture

Job summary

Pelico in Miami seeks a hands-on SecOps Lead to own security monitoring, incident response, and CNAPP operations across cloud, workloads, and code. You will translate alerts into investigations, prioritize remediation, and drive measurable risk reduction while enabling enterprise deployments and regulated readiness.

You’ll collaborate with Engineering, IT, and external security partners to build scalable security operations, automation, and secure delivery with a bias for practical, risk-based

Qualifications

• Strong hands-on experience in security operations, cloud security, or DevSecOps, with direct ownership of production security capabilities.
• Experience deploying and operating SIEM solutions, building and tuning detections, investigating alerts, and partnering with an internal or managed SOC.
• Practical experience with SOAR or security automation, including integrations, enrichment, and safe response workflows.
• Experience operating a CNAPP or equivalent cloud and workload security tooling, with a track record of driving findings through remediation and verifying fixes.
• Solid understanding of cloud IAM, networking, logging, containers, Kubernetes, and infrastructure as code, including how misconfigurations and vulnerabilities combine to create exploitable attack paths.
• Familiarity with secure SDLC practices, CI/CD, dependency and container scanning, secrets detection, and vulnerability remediation.
• Ability to automate security workflows using Python, shell scripting, APIs, or equivalent tools.
• Experience coordinating technical incident response and communicating clearly under pressure, with sound judgment around containment, escalation, and approval requirements.
• Ability to influence Engineering teams, translate technical findings into practical fixes, and balance security urgency with business and operational constraints.
• Strong written communication in English, disciplined documentation, and comfort working across US and European teams.
• You actively embrace AI tools as part of how you work — curious about what's possible and quick to adopt new ways of working smarter and faster.
• Hands-on experience with AI-assisted workflows and a genuine interest in staying at the frontier of what these tools can do.

Responsibilities

• Own security monitoring, detection, and incident response across cloud, application, and identity environments.
• Lead investigations, develop runbooks, automate enrichment, and coordinate with Engineering and IT.
• Manage CNAPP operations across cloud assets, workloads, containers, and code repos with prioritized remediation.
• Drive remediation ownership, set deadlines, verify fixes, and coordinate urgent mitigations.
• Strengthen cloud security via IAM, secrets management, encryption, logging, and secure configuration.
• Integrate security checks into CI/CD and IaC workflows with risk-based release gates.
• Support regulated deployments (ISO27001, SOC 2) with logging and access controls.

Skills

Security operations

Cloud security

DevSecOps

SIEM

SOAR

CNAPP

CI/CD security

Python scripting

Incident response

English communication

Tools

Kubernetes

CI/CD tooling

IaC (Terraform/CloudFormation)

Job description

Pelico in Miami seeks a hands-on SecOps Lead to own security monitoring, incident response, and CNAPP operations across cloud, workloads, and code. You will translate alerts into investigations, prioritize remediation, and drive measurable risk reduction while enabling enterprise deployments and regulated readiness.

You’ll collaborate with Engineering, IT, and external security partners to build scalable security operations, automation, and secure delivery with a bias for practical, risk-based