Cloud Security Operations Specialist

This is a fully remote position, open to applicants in Romania.

📋 Description

• Manage technical relationships with clients and lead security reviews for executives and developers.

• Create prioritized remediation roadmaps and directly communicate architectural risks.

• Implement and optimize AWS native security tools such as GuardDuty, Security Hub, Config, Inspector, and CloudTrail.

• Deploy and fine-tune Wiz while managing telemetry channels into Datadog.

• Act as the escalation authority for the Security Operations Center (SOC) team.

• Update SOC playbooks and refine detection logic to reduce false positives.

• Lead investigations, which include developing timelines, performing root-cause analysis, and preparing executive reports.

• Create reusable Python/boto3 scripts for enrichment and containment purposes.

• Design security guardrails utilizing SCPs, IAM, and network policies through Terraform or CDK.

• Oversee AWS LZA, Identity Center, and automated remediation workflows.

• Conduct regular security reviews and share findings with engineering teams and executive stakeholders.

• Drive customer remediation efforts that are feasible in terms of staffing and budget.

⛳️ Requirements

• 5+ years in cloud engineering, with a minimum of 2+ years focused on AWS security.

• Demonstrated experience leading technical reviews, producing board/executive-ready reports, and advising external clients during high-pressure situations.

• Extensive knowledge of IAM evaluation logic, SCPs, permission boundaries, cross-account federation, and KMS key architectures.

• Practical experience in developing modular, scalable Terraform or CDK code.

• Hands-on administration of AWS Organizations, Control Tower, or Landing Zone Accelerator (LZA).

• Proficient in Python and boto3 for creating production-grade, reusable security tools and auto-remediations.

• Familiarity with mapping PCI DSS or HIPAA controls directly to AWS infrastructure.

• Hands-on experience with AWS LZA (customization repositories/nested stacks), Wiz (or similar CNAPP/CSPM), and Datadog Cloud SIEM.

• Previous experience in an MSSP, security consultancy, or presales/solutions architecture role.

• Experience collaborating with a 24/7 SOC to develop actionable runbooks, escalation criteria, and fine-tune operational handoffs.

• Development of EventBridge-driven auto-remediation, custom Config rules, and implementing CI/CD security gates (SAST/SCA/secrets).

• Hands-on expertise in network security architecture, including Transit Gateway segmentation, AWS Network Firewall, and VPC traffic inspection.

• Experience correlating infrastructure controls with SOC 2, ISO 27001, NIST 800-53, or FedRAMP standards.

• AWS Security Specialty or Solutions Architect Professional Certification.

🏝️ Benefits

• Competitive salaries.

• Bonus incentives.

• Comprehensive benefits package.

• Flexible working hours.

• Mentorship opportunities.

• Opportunities for learning and personal development.