Senior Cloud Security Engineer: Detect, Respond & Secure Cloud Ops

JMJ PHILLIP; Turkey (TX); On-site; USD 150,000 - 200,000; Full time

Job summary

JMJ PHILLIP is seeking a hands-on Senior Cloud Security Engineer to establish and strengthen continuous security monitoring, detection engineering, incident response, and security operations across cloud, endpoints, network, and on-prem environments.

In this role you will own security monitoring, manage SIEM platforms such as Microsoft Sentinel, and coordinate with engineering, infrastructure, and leadership to reduce risk and improve incident response and security posture in a fast-paced

Qualifications

• 5+ years in cybersecurity, security operations, cloud security, or related engineering roles.
• Demonstrated experience with SIEM administration, detection engineering, alert investigation, and incident response.
• Hands-on experience with Microsoft Sentinel or a comparable enterprise SIEM platform.
• Experience with AWS security services, including GuardDuty, Security Hub, CloudTrail, IAM, and CloudWatch.
• Experience with endpoint detection and response technologies.
• Strong understanding of security logging, event correlation, threat detection, and incident investigation.
• Experience operating in Microsoft Azure and AWS environments.
• Working knowledge of network security, firewalls, identity systems, endpoints, and hybrid infrastructure.
• Understanding of vulnerability management processes and common cybersecurity frameworks.
• Strong technical documentation and communication skills.
• Ability to work independently and take ownership of security operations from identification through resolution.

Responsibilities

• Own continuous security monitoring across cloud, endpoint, network, and on-premises environments.
• Administer and optimize Microsoft Sentinel or comparable SIEM platforms, including data connectors, analytics rules, alerting, dashboards, workbooks, and automation.
• Monitor and manage AWS security services, including GuardDuty, Security Hub, CloudTrail, CloudWatch, and IAM.
• Develop and maintain security detections, correlation rules, use cases, and alert thresholds.
• Improve threat visibility while reducing false positives and alert fatigue.
• Identify gaps in logging, monitoring, and detection coverage and implement corrective actions.
• Support threat hunting, security analytics, and proactive identification of emerging risks.
• Investigate security alerts, anomalous activity, potential compromises, and policy violations.
• Lead incident triage, containment, eradication, recovery, and post-incident review activities.
• Develop, maintain, and exercise incident response plans, playbooks, escalation procedures, and communication processes.
• Ensure security incidents and events are properly documented with sufficient evidence for internal and external assessments.
• Monitor endpoint security and EDR platforms and investigate suspicious endpoint activity.
• Establish and maintain centralized security logging, retention, review, and audit capabilities.

Skills

SIEM administration

Detection engineering

Incident response

Microsoft Sentinel

AWS security services

EDR security

Cloud security

Azure/AWS environments

Tools

Microsoft Sentinel

GuardDuty

Security Hub

CloudTrail

CloudWatch

EDR tools

Job description

JMJ PHILLIP is seeking a hands-on Senior Cloud Security Engineer to establish and strengthen continuous security monitoring, detection engineering, incident response, and security operations across cloud, endpoints, network, and on-prem environments.

In this role you will own security monitoring, manage SIEM platforms such as Microsoft Sentinel, and coordinate with engineering, infrastructure, and leadership to reduce risk and improve incident response and security posture in a fast-paced