Cloud Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Function at the core of Foresite’s technical onboarding process.

• Oversee the hands-on configuration of cloud security tools, collaborating closely with customer analysts to convert complex findings into automated, high-fidelity security operations.

• Guarantee technical precision in parser development and UDM mapping to uphold the highest standards of security data quality.

• Create custom YARA-L detection rules to link cloud posture findings with network traffic.

• Design comprehensive SOAR Playbooks and utilize Python to craft logic for custom actions, enhancing the customer’s remediation workflows.

• Conduct training sessions for customer analysts, instructing them on how to navigate SCC/Wiz findings and investigate alerts within the Google SecOps interface.

• Serve as the technical liaison for resolving integration issues and fine-tuning automation scripts.

⛳️ Requirements

• A minimum of 2 years of substantial hands-on experience with Google SecOps (Chronicle), particularly in parser development, UDM mapping, and YARA-L rule creation.

• Demonstrated experience in configuring GCP SCC and Wiz, with foundational knowledge equivalent to a Google Cloud Associate Cloud Engineer.

• Skilled in Python and passionate about using it to tackle complex security automation challenges.

• Proven ability to manage customer onboarding from technical initiation to final handoff with minimal senior oversight.

• Capacity to convert intricate technical configurations into actionable insights for customer security teams.

🏝️ Benefits

• Comprehensive medical insurance options to ensure the health of you and your family.

• Employer-paid Dental coverage, along with Short-Term (STD) and Long-Term Disability (LTD), fully provided.

• Begin with 3 weeks of paid vacation, plus additional sick leave and paid company holidays.

• Access to top-tier training programs.

• Contribute to the protection of global clients using advanced AI-enhanced security tools and GCP native technologies.