Senior Cloud Security Engineer: Detections & Data Lake

Veeam Software, Inc.; San Jose (CA); On-site; USD 206,000 - 343,000; Full time

Benefits offered by this job

Unlimited PTO and holidays

Health, dental, vision benefits

401(k) with company match

Parental leave

Job summary

Veeam Software, Inc. is seeking a Security Engineer III to own detection engineering across our cloud estate and to build a data lake for security telemetry in Azure and AWS.

You will partner with SRE, Product Engineering, and Security Engineering to deliver end-to-end security controls through code and automation. You will design and maintain the security data lake, write and tune detections as code, automate triage, and harden cloud environments.

Qualifications

• 5+ years in security engineering, cloud operations, or detection engineering with production cloud security work.

Responsibilities

• Design and build our security data lake: decide telemetry sources from Azure, AWS, SaaS, and endpoints, and plan retention and cost.
• Write, tune, and version-control detections as code through CI/CD.
• Build the response side with detections, automate triage and enrichment, and reduce MTTD/MTTR.
• Hardening Azure and AWS environments: identity, RBAC, logging, and public-exposure control.
• Deliver cloud security controls as Terraform modules for consistency across environments.
• Turn posture findings into a prioritized remediation queue with cross-team alignment.
• Run detection coverage assessments against threat frameworks and close gaps.
• Shape direction on detection and cloud security tooling adoption or retirement.

Skills

Security engineering

Terraform

Cloud platforms (Azure & AWS)

Detection engineering

RBAC and least privilege

Python scripting

KQL/SQL

Automation & CI/CD

Tools

Terraform

Azure

AWS

GitHub Actions

Azure DevOps

Wiz

Azure Data Explorer

S3/ADLS

PowerShell

Job description

Veeam Software, Inc. is seeking a Security Engineer III to own detection engineering across our cloud estate and to build a data lake for security telemetry in Azure and AWS.

You will partner with SRE, Product Engineering, and Security Engineering to deliver end-to-end security controls through code and automation. You will design and maintain the security data lake, write and tune detections as code, automate triage, and harden cloud environments.