Cloud Security Engineer (London)

Roles & Responsibilities

• Monitor, investigate, and respond to security alerts across cloud, endpoint, network, and identity platforms.
• Execute remediation and mitigation activities within AWS, Azure, and GCP cloud environments.
• Build, tune, and maintain SIEM, EDR, and cloud-native detections to improve alert accuracy.
• Participate in incident response activities including triage, containment, eradication, and recovery.
• Perform threat hunting using logs, telemetry, and attacker TTPs.
• Support vulnerability management, risk remediation, and security hardening initiatives.
• Develop and maintain security runbooks, playbooks, and operational documentation.
• Implement automation workflows using scripting tools such as Python, PowerShell, Terraform, or CloudFormation.
• Collaborate with infrastructure, cloud, and application teams to reduce attack surface and improve security posture.
• Monitor cloud environments for security misconfigurations and compliance gaps.
• Contribute to tabletop exercises, purple team activities, and continuous security improvement efforts.

Required Qualifications

• 5+ years of experience in Cyber Security / SOC / Incident Response roles.
• Strong hands‑on experience with AWS GuardDuty, AWS Security Hub, Palo Alto XSOAR, and SIEM platforms.
• Experience securing AWS, Azure, and/or GCP cloud environments.
• Expertise in SOC operations, threat hunting, incident response, and network security.
• Experience with CyberArk PAM and identity security controls.
• Knowledge of scripting/automation using Python, PowerShell, Terraform, or CloudFormation.
• Understanding of NIST, CIS, and security compliance frameworks.
• Robust analytical, troubleshooting, and communication skills.

Equal Opportunity Employer

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, citizenship status, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable law.