Cloud Security Operations Specialist

This is a fully remote position, open to applicants in Romania.

📋 Description

• Manage client technical relationships and oversee executive/developer security assessments

• Create prioritized remediation plans and convey architectural risks directly

• Implement and optimize AWS native security tools such as GuardDuty, Security Hub, Config, Inspector, and CloudTrail

• Oversee Wiz and telemetry integration with Datadog

• Act as the escalation authority for the SOC team

• Maintain and update SOC playbooks while fine-tuning detection logic to reduce false positives

• Lead investigations, including the development of timelines, root-cause analysis, and executive reporting

• Create reusable Python/boto3 scripts for enrichment and containment purposes

• Design security guardrails utilizing SCPs, IAM, and network policies with Terraform or CDK

• Oversee AWS LZA, Identity Center, and automated remediation processes

⛳️ Requirements

• 5+ years of experience in cloud engineering, with at least 2+ years focused on AWS security

• Demonstrated success in leading technical reviews, producing board/exec-ready reports, and providing direct advice to external clients during high-stress situations

• Extensive knowledge of IAM evaluation logic, SCPs, permission boundaries, cross-account federation, and KMS key architectures

• Practical experience in developing modular, scalable Terraform or CDK code

• Hands-on administration of AWS Organizations, Control Tower, or Landing Zone Accelerator (LZA)

• Proficient in Python and boto3 for building high-quality, reusable security tools and automated remediation solutions

• Familiarity with mapping PCI DSS or HIPAA controls directly to AWS infrastructure

• Experience with AWS LZA, Wiz (or similar CNAPP/CSPM), and Datadog Cloud SIEM

• Prior experience in an MSSP, security consultancy, or presales/solutions architecture

• Proven ability to collaborate with a 24/7 SOC to create actionable runbooks, escalation criteria, and operational handoffs

• Experience in building EventBridge-driven auto-remediation, custom Config rules, and enforcing CI/CD security gates (SAST/SCA/secrets)

• Hands-on experience in network security architecture including Transit Gateway segmentation, AWS Network Firewall, and VPC traffic inspection

• Experience in mapping infrastructure controls to SOC 2, ISO 27001, NIST 800-53, or FedRAMP

• AWS Security Specialty or Solutions Architect Professional Certification

🏝️ Benefits

• Competitive salaries

• Bonus incentives

• Comprehensive benefits

• Flexible working hours

• Mentorship opportunities

• Opportunities for learning and personal development