Security Engineer – AWS Security Incident Response, Cloud Security, AI Security, EDR & SIEM
Core
Intermediate Security Engineer managing cloud security incidents, SIEM monitoring, EDR operations, and AI security risks for enterprise protection.
Role type
Intermediate hands-on Security Engineer (Cloud & SOC)
Builds
Cloud incident response runbooks, SIEM detection use cases, EDR investigation workflows, and AI security guardrails
Domain
Cloud Security, Cybersecurity, AI Security
Required skills
AWS security services (GuardDuty, Security Hub, CloudTrail, IAM), SIEM engineering (Microsoft Sentinel, KQL), EDR/XDR operations (Microsoft Defender), incident response lifecycle, threat hunting, MITRE ATT&CK, basic scripting (PowerShell, Python, KQL)
Preferred skills
AWS Security Specialty or Solutions Architect certification, Microsoft SC-200/SC-100/AZ-500/GCIH/GCIA certifications, global SOC experience, Microsoft Security Copilot exposure, regulated industry experience
Technologies
AWS, Microsoft Sentinel, Microsoft Defender XDR, Microsoft Security Copilot, SOAR, KQL, PowerShell, Python
Responsibilities
Investigate and respond to AWS security alerts and incidents; tune SIEM use cases and validate log sources; perform EDR/XDR endpoint triage and remediation; monitor and mitigate AI security risks; conduct threat hunting and create detection playbooks; automate response tasks using scripting
Seniority
Intermediate, hands-on IC
