Cloud Security Engineer (Managed Services)

Role Summary
Own cloud security posture management, IAM administration, and security incident response across a portfolio of hybrid AWS/OCI managed-services clients. Integrate with existing customer SIEM/vulnerability tooling and drive remediation through the standard change process.

Key Responsibilities

Monitor and triage findings from AWS Security Hub/GuardDuty and OCI Cloud Guard across managed accounts

Integrate and operate existing customer SIEM platforms log source onboarding, alert tuning, detection engineering

Manage IAM/privileged access, MFA enforcement, and access reviews across AWS IAM Identity Center and OCI IAM domains

Own the CSPM remediation register track findings to closure with severity/effort/owner assigned

Support incident response for Sev1/Sev2 security events, including out-of-hours escalation for critical incidents

Maintain compliance evidence (ISO 27001 and applicable regulatory frameworks) for audit readiness

Participate in landing zone and security architecture reviews for new client onboarding

Experience Required

4 to 7 years in cloud security, with genuine hands-on experience on both AWS and OCI

Prior MSP or shared-services environment experience, managing security across multiple client environments simultaneously

Certifications: AWS Security Specialty or OCI Security Professional (one required, both preferred): CISSP/CCSP a plus

Working knowledge of SIEM operations (Wazuh, Sentinel, Splunk, or Elastic) operating an existing platform is the core skill; deployment experience is a bonus

Familiarity with a compliance framework such as ISO 27001; exposure to other regulatory security frameworks is a plus