Security Engineer

Join our team as a Security Engineer III, where you will be responsible for detecting and responding to threats across our cloud estate. You will design and build our security data lake, write and version-control detections, and automate triage and enrichment. You will also harden our Azure and AWS environments, deliver cloud security controls as Terraform, and run detection coverage assessments. This is a hands-on building role that requires strong cloud security fundamentals and production experience in both Azure and AWS.

Responsibilities

• Conception et construction d'un lac de données de sécurité, y compris la décision sur la télémétrie à ingérer et la normalisation.
• Rédaction, réglage et contrôle de version des détections en tant que code, en possédant l'ensemble du cycle de vie.
• Renforcement des environnements Azure et AWS, y compris la gestion des identités, le contrôle d'accès basé sur les rôles et la gestion des secrets.
• Production Terraform experience. You've written and maintained modules other teams consume, and you know why a security control belongs in code rather than in a runbook
• Demonstrated detection building. You've written detections against real telemetry, tuned them against real false positives, and can explain a specific rule you shipped and how you validated it
• Microsoft Sentinel at production scale: analytics rules, automation rules, ingestion cost management, and multi-workspace design

Requirements

• Scripting and automation ability in Python or a comparable language, enough to build and maintain tooling rather than only configure vendor products
• Strong cloud security fundamentals: RBAC and least privilege, secret and key management, egress control, and public-exposure prevention
• Real operational depth in both Azure and AWS: identity models, logging and audit sources, network boundaries, and where each provider's defaults leave you exposed
• 5+ years in security engineering, cloud operations, or detection engineering, with recent hands-on ownership of production cloud security work
• Fluency in at least one query language for security data (KQL, SQL, or equivalent) and the judgment to know when a query problem is actually a data-model problem
• A track record of shipping production code or infrastructure you can point to. This is a hands-on building role, not an advisory one
• Wiz experience, including turning posture and attack-path findings into an owned remediation workflow
• Incident response experience in a cloud environment, on-call or as an investigator
• Kubernetes and container security exposure (AKS, EKS) and runtime detection for containerized workloads

Preferred

• Security data lake or SIEM migration experience, including cost and retention tradeoffs
• Familiarity with regulated-industry audit expectations (SOC 2 Type 2, ISO 27001, FedRAMP, HITRUST) and what auditors want from logging and monitoring controls
• Relevant certifications (Azure or AWS security specialty, GCIA, GCDA, or similar)

Pay

USD 208,500 - 347,500