Search Remote Jobs

Cloud Security Operations Specialist

🔥 18 hours ago

🇷🇴 Romania – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

Where this job comes from

Posted on AllCloud's careers page, not through a job board

First seen by Remote Rocketship 18 hours ago

Still open on AllCloud's site. Checked 3 hours ago.

Logo of AllCloud

AllCloud

201 - 500 employees

Founded 2014

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

AllCloud is a cloud consulting company that provides tailored AWS and Salesforce solutions to optimize operations and accelerate innovation for businesses. They specialize in cloud platforms, data and AI, and managed services, helping companies in various industries including financial services, retail, and technology. As a recognized AWS Premier Consulting Partner and Salesforce Consulting Partner, AllCloud offers expertise in cloud transformation, Customer 360 insights, and scalable cloud infrastructures.

📋 Description

• Own client technical relationships and lead executive/developer security reviews • Build prioritized remediation roadmaps and communicate architectural risks directly • Deploy and tune AWS native security tools including GuardDuty, Security Hub, Config, Inspector, and CloudTrail • Deploy and tune Wiz and manage telemetry flowing into Datadog • Serve as escalation authority for the SOC team • Keep SOC playbooks updated and tune detection logic to eliminate false positives • Lead investigations, including timeline development, root-cause analysis, and executive reporting • Develop reusable Python/boto3 scripts for enrichment and containment • Architect security guardrails using SCPs, IAM, and network policies with Terraform or CDK • Manage AWS LZA, Identity Center, and automated remediation pipelines • Run recurring security reviews and present findings to engineering teams and executive stakeholders • Drive customer remediation that can realistically be staffed and funded

🎯 Requirements

• 5+ years in cloud engineering, with at least 2+ years dedicated to AWS security • Proven track record leading technical reviews, delivering board/exec-ready reports, and advising external clients directly during high-pressure incidents • Deep expertise in IAM evaluation logic, SCPs, permission boundaries, cross-account federation, and KMS key architectures • Hands-on experience developing modular, scalable Terraform or CDK code • Practical administration of AWS Organizations, Control Tower, or Landing Zone Accelerator (LZA) • Proficient in Python and boto3 for building production-grade, reusable security tooling and auto-remediations • Working knowledge of mapping PCI DSS or HIPAA controls directly to AWS infrastructure • Hands-on experience with AWS LZA (customization repos/nested stacks), Wiz (or similar CNAPP/CSPM), and Datadog Cloud SIEM • Prior background in an MSSP, security consultancy, or presales/solutions architecture • Experience partnering with a 24/7 SOC to write actionable runbooks, escalation criteria, and tuning operational handoffs • Building EventBridge-driven auto-remediation, custom Config rules, and blocking CI/CD security gates (SAST/SCA/secrets) • Hands-on network security architecture covering Transit Gateway segmentation, AWS Network Firewall, and VPC traffic inspection • Experience mapping infrastructure controls to SOC 2, ISO 27001, NIST 800-53, or FedRAMP • AWS Security Specialty or Solutions Architect Professional Certification

🏖️ Benefits

• Competitive salaries • Bonus incentives • Benefits • Flexible hours • Mentoring • Learning and personal development opportunities

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 October 2

Invicti

201 - 500

🔒 Cybersecurity

☁️ SaaS

🏢 Enterprise

Senior Security Operations Engineer building malware and vulnerability detections for Invicti’s application-security platform. Researching attack techniques and integrating validation into cloud-native CI/CD pipelines.

🕒 September 29

Talan

1001 - 5000

💼 Consulting

🏢 Enterprise

☁️ SaaS

Senior Cybersecurity Analyst protecting Talan’s global clients through 24x7 SOC monitoring and incident response. Investigating threats across SIEM, EDR, cloud, Windows and Linux environments.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok