Senior Cloud Security Researcher - Security Automation (Cortex)
Core
Building autonomous cloud defense playbooks that transform security signals into intelligent investigation and response workflows for modern cloud environments.
Role type
Senior IC security automation engineer (cloud security)
Builds
Automated playbooks for the Autonomous Cloud SOC that investigate threats, gather evidence, assess blast radius, and execute response actions.
Domain
Cloud security operations, Cloud Detection & Response (CDR), Cloud Security Posture Management (CSPM)
Deliverable
production ML models | product features
Required skills
Cloud security engineering, incident response, threat hunting, DevSecOps, AWS/Azure/GCP infrastructure, Kubernetes, cloud networking (VPC Flow Logs, Transit Gateways), identity systems (IAM), CI/CD pipelines, posture management, Python/Go/Bash scripting
Preferred skills
Large-scale data pipelines (BigQuery, Dataflow), MITRE ATT&CK frameworks, advanced cloud security certifications, operating highly available large-scale cloud environments
Technologies
AWS, Microsoft Azure, Google Cloud, Kubernetes, Python, Go, Bash, BigQuery, Dataflow
Responsibilities
Design and build automated playbooks to investigate security signals and execute response actions; Work across cloud control planes, identity systems, Kubernetes, and network telemetry to turn signals into outcomes; Continuously improve investigation logic and response workflows as cloud environments evolve
Seniority
Senior, hands-on IC
