Job Description

About the Role

Were looking for a Cloud Security Engineer with a strong incident response background to join our security team. Youll be on the front lines detecting, investigating, and remediating security events across our cloud infrastructure and endpoints.

What Youll Do

- Lead end-to-end incident response: triage, containment, investigation, and post-incident review

- Hunt for threats and investigate alerts using CrowdStrike Falcon (EDR, threat intelligence, and OverWatch)

- Build and tune detection logic in Splunk write SPL queries, create dashboards, and maintain alert fidelity

- Audit and investigate events in AWS CloudTrail, CloudWatch, and native AWS security services (GuardDuty, Security Hub,

Config)

- Correlate signals across endpoint, network, and cloud layers to establish attack timelines

- Document findings and produce transparent incident reports for both technical and non-technical audiences

- Contribute to runbooks, playbooks, and continuous improvement of the IR program

What You Bring

- 3+ years in a security engineering, SOC, or incident response role





- Hands-on experience with CrowdStrike (investigation workflows, RTR, detections tuning)

- Proficiency in Splunk SPL, data onboarding, and building actionable dashboards

- Solid understanding of AWS IAM, CloudTrail log structure, and cloud-native audit trails

- Familiarity with attacker TTPs (MITRE ATTCK) and how they map to cloud environments

- Ability to communicate technical findings clearly under pressure

Nice to Have

- GCIH, GCFE, AWS Security Specialty, or similar certifications

- Experience with IaC security tooling (Terraform, CloudFormation scanning)

- Scripting ability in Python or Bash for automation and log parsing

Total Experience Expected: 04-06 years Qualifications

B. E/B. TECH/MCA (Computer Science/Electronics and related branches only)

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Cloud Security Module Lead-Service Support (Noida)
🏢 Sopra Steria
📍 Noida