Cloud Security Engineer (Managed Services)

Role Summary
Own cloud security posture management, IAM administration, and security incident response across a portfolio of hybrid AWS/OCI managed-services clients. Integrate with existing customer SIEM/vulnerability tooling and drive remediation through the standard change process.

Key Responsibilities

• Monitor and triage findings from AWS Security Hub/GuardDuty and OCI Cloud Guard across managed accounts
• Integrate and operate existing customer SIEM platforms log source onboarding, alert tuning, detection engineering
• Manage IAM/privileged access, MFA enforcement, and access reviews across AWS IAM Identity Center and OCI IAM domains
• Own the CSPM remediation register track findings to closure with severity/effort/owner assigned
• Support incident response for Sev1/Sev2 security events, including out-of-hours escalation for critical incidents
• Maintain compliance evidence (ISO 27001 and applicable regulatory frameworks) for audit readiness
• Participate in landing zone and security architecture reviews for new client onboarding

Experience Required

• 4 to 7 years in cloud security, with genuine hands-on experience on both AWS and OCI
• Prior MSP or shared-services environment experience, managing security across multiple client environments simultaneously
• Certifications: AWS Security Specialty or OCI Security Professional (one required, both preferred): CISSP/CCSP a plus
• Working knowledge of SIEM operations (Wazuh, Sentinel, Splunk, or Elastic) operating an existing platform is the core skill; deployment experience is a bonus
• Familiarity with a compliance framework such as ISO 27001; exposure to other regulatory security frameworks is a plus