ORCA Security & Cloud Expert

For one of my customer we are looking for a ORCA Security & Cloud Expert.

Location: Europe(100% remote)

Duration: 6+ months renewabale

Description:

The ORCA Security & Cloud Expert is responsible for deploying, operating, and continuously improving Orca Security (CNAPP) while also acting as a strong cloud security and cloud engineering counterpart to strengthen our security posture across cloud environments (AWS/Azure/GCP as applicable). The role ensures effective onboarding of cloud accounts, high-quality findings, riskbased prioritization, and remediation follow-up with Cloud Platform, DevOps, SRE, and Application teams. It also contributes to cloud security governance, secure-bydesign practices, and continuous improvement of cloud controls.

• Platform ownership & operations
• Detection, triage & remediation management
• Governance, reporting & continuous improvement
• Enablement & stakeholder management

Technical Skills:

• Proven hands-on experience with Orca Security (CNAPP/CSPM/CWPP) in production (onboarding, policy tuning, triage, reporting, integrations).

• Strong Cloud Security experience on AWS and/or Azure and/or GCP (security services, shared responsibility model, cloud-native controls).

• Knowledge of DevSecOps practices and CI/CD security controls.

• Solid understanding of

• Vulnerability management & remediation workflows

• Cloud misconfigurations and security best practices

• DevSecOps / Shift-left security (IaC scanning, SAST, secrets detection)

• Container/Kubernetes security basics (images, runtime, cluster posture—high level)

• ITSM tools (ServiceNow / Helix / Jira)

• SIEM / SOC integration Solid understanding of:

o Cloud IAM (roles, policies, least privilege)

o Network security (security groups, NSGs, segmentation, exposure)

o Vulnerability management (CVEs, patching, prioritization)

o Container/Kubernetes security basics

o Data security concepts (sensitive data exposure, encryption, key management)

Nice-to-have

• Experience with other CNAPP tools (Prisma Cloud, Wiz, Defender for Cloud, Lacework).

• Scripting/automation (Python, PowerShell) and API usage.

• Hands-on experience with IaC (Terraform/Bicep/CloudFormation) and cloud landing zone concepts.

• Certifications (one or more): CCSP, AWS/Azure security certs, CISSP, CISM (optional).