Senior Cloud Security & Incident Response Lead

Western Governors University; Salt Lake City (UT); On-site; USD 161,000 - 250,000; Full time

Job summary

Western Governors University is seeking a lead-level security professional to guide incident response, threat detection, and remediation. You will shape tools, automation, and security capabilities spanning AWS, cloud platforms, and integrated workflows with partners.

The role requires deep technical expertise, hands-on leadership, and the ability to translate threats into stronger controls. In-office in Salt Lake City or Raleigh with travel as needed.

Qualifications

• Bachelor's degree in IT security, CS, engineering or related field.
• 7+ years of information security experience with broad domain knowledge.
• Hands-on with MITRE ATT&CK framework and SIEM content development.
• Experience integrating security into CI/CD pipelines and IaC tools.

Responsibilities

• Lead complex incident response and investigations with data collection and containment.
• Develop detection content aligned to MITRE ATT&CK; research IOc s and attack patterns.
• Architect cloud threat analytics using log correlation, AI, and ML across AWS.
• Design and implement SOAR and security automation to improve investigations and remediation.
• Build security capabilities across cloud infra, CI/CD, IaC, data security and encryption.
• Identify security gaps and lead end-to-end solutions with ServiceNow integrations.
• Mentor analysts and guide the team in emerging threats and best practices.

Skills

Incident response

Threat detection

Security architecture

Cloud security

Scripting & automation

Leadership & mentoring

Education

Bachelor's Degree in IT Security/CS/Engineering

Tools

AWS APIs

Lambda

DynamoDB

EC2

VPC

CloudFront

CloudTrail

CloudWatch

IAM

Job description

Western Governors University is seeking a lead-level security professional to guide incident response, threat detection, and remediation. You will shape tools, automation, and security capabilities spanning AWS, cloud platforms, and integrated workflows with partners.

The role requires deep technical expertise, hands-on leadership, and the ability to translate threats into stronger controls. In-office in Salt Lake City or Raleigh with travel as needed.