Managed Cloud Detection and Response Analyst Job at Wiz (London)

Managed Cloud Detection and Response Analyst

Wiz is looking for a Managed Cloud Detection and Response Analyst to join our ne...

Location

Australia

Salary:

Not provided

Wiz

Expiration Date

Until further notice

Requirements

3+ years of experience in a Security Operations Center or Managed Detection and Response, specifically involving cloud environments
Solid knowledge in Cloud Security, with familiarity in cloud services, Kubernetes, cloud architecture, and major providers (AWS, GCP, Azure)
Strong analytical skills with a detail-oriented mindset, capable of assessing complex security incidents, separating false positives from true compromise, and providing actionable insights
Passion for continuous learning and improvement, staying up-to-date on the latest trends, threats, and best practices in cloud security
Willingness to work in shifts, including nights, weekends, and holidays to provide 24/7 coverage for customers
Excellent communication skills, both verbal and written
Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship.

Job Responsibility

Continuously monitor customers’ cloud environments and workloads for security alerts and analyze potential cyber threats to identify and prioritize cyber security incidents
Triage prioritized cyber incidents and coordinate appropriate response actions to mitigate risks effectively
Work closely with customer teams to guide and assist with investigation and remediation of incidents
Create and deliver incident reports that document findings and response actions taken for customers
Write and implement custom detection rules and fine-tune alerts to enhance threat detection capabilities for the customer’s specific cloud environment
Develop and maintain cyber incident response playbooks to standardize procedures and enhance the internal methodology of the team
Stay up to date with the latest threats, vulnerabilities, and trends in cloud security to update response strategies and improve detection methods.

Fulltime

Sr Incident Response Analyst

We have a 3 month contract with opportunity to extend or convert for a seasoned ...

Location

United States

Salary:

Not provided

Zeektek

Expiration Date

Until further notice

Requirements

A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and Requires 4 – 6 years of related experience
5+ years of Security Operations, Incident Response, and/or Digital Forensics Experience
Prior Incident Response Experience in a hybrid enterprise environment
Experienced with utilizing security tooling such as: Splunk, EDR, Tanium, etc
Strong understanding of cloud environments
SANS GIAC Security Essentials (GSEC), SANS GIAC Certified Intrusion Analyst (GCIA) or equivalent, SANS GIAC Certified Incident Handler (GCIH) or equivalent required
Must be located in CST or EST

Job Responsibility

Reviews current configurations of the production information systems and networks against compliance standards
Prepares the prevention and resolution of security breaches and ensure incident and response management processes are initiated
Implements and discuss security service audit schedules, review access authorization, and perform the required access controls testing to identify security shortfalls
Designs of automated scripts, contingency plans, and other programmed responses which are launched when an attack against the company’s systems has been detected
Collaborates with Information Security Architects, Information Security Engineers, and software or hardware stakeholders
Notifies internal and/or external teams according to agreed alert priority levels, escalation trees, triaging of security alerts, events, and notifications
Ties third party attack monitoring services and threat reporting services, into internal CIRT (Cyber Incident Response Team) communications systems
Performs post-mortem analysis with logs, network traffic flows, and other recorded information to identify intrusions by unauthorized parties, as well as unauthorized activities of authorized users
Performs other duties as assigned
Complies with all policies and standards

What we offer

Weekly Direct Deposit
401K Matching
Competitive medical, dental and vision insurance
Consistent communication throughout your project
ZeekTek Referral Program

Incident Response Analyst

Apex Systems is hiring for an Incident Response Analyst for a large healthcare c...

Location

United States , Various

Salary:

50.00 - 60.00 USD / Hour

Apex Systems

Expiration Date

Until further notice

Requirements

Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) or equivalent experience
4+ years of related experience in incident response
Knowledge of tools, techniques, and processes (TTP) used by threat actors
Understanding of indicators of compromise (IOC)
Knowledge of network and infrastructure technologies including routers, switches, and firewalls
Prior Incident Response Experience in a hybrid enterprise environment
Experienced with utilizing security tooling such as: Splunk, EDR, Tanium, etc
Strong understanding of cloud environments
Ability to identify problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
Capacity to work independently

Job Responsibility

Review current configurations of production information systems and networks against compliance standards
Prepare for the prevention and resolution of security breaches and ensure incident response processes are initiated
Implement and discuss security service audit schedules, review access authorization, and perform access controls testing
Design automated scripts, contingency plans, and other programmed responses for detected attacks
Collaborate with Information Security Architects, Engineers, and other stakeholders
Notify internal and external teams based on alert priority and triage security alerts, events, and notifications
Integrate third-party attack monitoring and threat reporting services into internal communication systems
Perform post-mortem analysis using logs and network traffic to identify intrusions
Support incident response (IR) activities within the organization
Partner with business units to accomplish Enterprise-wide containment, remediation and recovery actions and strategic initiatives

What we offer

medical
dental
vision
life
disability
other insurance plans
ESPP (employee stock purchase program)
401K program with company match after 12 months
HSA (Health Savings Account on the HDHP plan)
SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions

Fulltime

New

Cloud Security Analyst

Reporting to the Global Head of Security under Product Security, the Cloud Secur...

Location

Ireland , Cork; Dublin

Salary:

Not provided

Alter Domus

Expiration Date

Until further notice

Requirements

Bachelor’s degree in computer science, Information Security, or related professional experience
3+ years’ experience in cloud security
1+ years hand-on experience working with containerized environments
Excellent understanding of Azure, AWS, k8s
Experience working with cloud security posture management tooling
Hands-on experience on threat modeling and security architecture reviews
Hands-on experience of working with compliance requirements and turning them to technical controls: Ability to implement and manage security controls in cloud environments
Knowledge of cloud security best practices and industry standards
Strong analytical and problem-solving skills
Ability to think critically and make data-driven decisions

Job Responsibility

Design and implement security controls across AWS, Azure environments
Continuously enhance our cloud security posture management (CSPM) program to identify and remediate risks in configurations and policies
Ensure SOC 2 cloud security controls are always executed and auditable
Monitor security for containerized applications and Kubernetes clusters
Contribute to best practices for container image security, pod security policies, and cluster network segmentation to protect our microservices
Ensure cloud systems and solutions are secure by design and champion a secure guardrails approach—automating security checks and educating teams to build secure systems from the ground up
Conduct continuous vulnerability and compliance validation to ensure ongoing adherence to security policies and regulations
Monitor cloud environments for security incidents and ensuring rapid response through automated mechanisms
Serve as subject matter expert on cloud technologies and security solutions
Perform technical security design, architecture, change and/or configuration audits/reviews on our hosting environments including Azure & AWS, servers, network devices, endpoints, and security technologies deployed (CNAPP, MDM, WAF, DDoS, etc.)

What we offer

Support for professional accreditations such as ACCA and study leave
Flexible arrangements, generous holidays, plus an additional day off for your birthday
Continuous mentoring along your career progression
Active sports, events and social committees across our offices
24/7 support available from our Employee Assistance Program
The opportunity to invest in our growth and success through our Employee Share Plan

Fulltime

New

Director, Security Operations and Incident Response

At Comcast, we are committed to providing secure and reliable services for our c...

Location

United States , Philadelphia

Salary:

Not provided

Comcast

Expiration Date

Until further notice

Requirements

10+ years of relevant cybersecurity experience, including leadership experience in cybersecurity operations, security incident response, threat hunting, threat detection, or enterprise SOC functions in a large, complex environment with at least 5 years of experience managing leaders of people
Demonstrated experience managing high-severity cybersecurity incidents, including executive communications, cross functional coordination, containment strategy, remediation oversight, and post-incident improvement
This role supports a 24x7 cybersecurity operation and requires availability outside of standard business hours, including nights, weekends, and holidays, during critical incidents and high-severity security events
Strong leadership experience building, managing, and scaling technical security teams, including managers, incident responders, SOC analysts, threat hunters, detection engineers, and specialized security professionals
Deep technical understanding of modern security operations, including SIEM, EDR, threat intelligence, malware analysis, digital forensics, cloud security, identity security, network security, automation, and detection engineering
Experience partnering with engineering teams to build, improve, and operationalize security tools, data platforms, dashboards, automations, telemetry pipelines, and analyst workflows
Proven ability to make high-impact decisions under pressure and lead teams through ambiguous, fast-moving security events
Experience developing incident response operating models, playbooks, escalation procedures, readiness exercises, metrics, and continuous improvement programs
Strong understanding of adversary tradecraft, threat hunting methodologies, detection lifecycle management, and frameworks such as MITRE ATT&CK
Strong executive communication skills, including the ability to brief senior leaders on risk, impact, operational status, capacity gaps, and recommended actions

Job Responsibility

Lead and scale Comcast’s SOC, Security Incident Response Team, threat hunting, and threat detection functions, ensuring the organization is trained, equipped, and structured to respond effectively to routine security events and major incidents
Build the operating model, staffing approach, escalation paths, runbooks, and surge capacity required to manage multiple concurrent major incidents
Serve as a senior incident commander for high-severity cybersecurity events, coordinating response across technical teams, business stakeholders, legal, privacy, communications, and executive leadership
Lead Comcast’s threat hunting function to proactively identify adversary behavior, emerging attack patterns, control gaps, and high-risk activity before it becomes a major incident. Including leading Purple Team activities
Own and mature the enterprise threat detection strategy, including detection coverage, alert fidelity, tuning, detection lifecycle management, and alignment to threat intelligence, adversary tradecraft, and business risk
Partner with security engineering, data engineering, platform engineering, and product teams to design and improve the tools, pipelines, dashboards, automations, and case management workflows used by cyber operations teams
Drive continuous improvement across SIEM use cases, endpoint detections, cloud detections, identity detections, network telemetry, enrichment pipelines, automation, and analyst workflows
Ensure lessons learned from incidents and hunts directly inform new detections, improved runbooks, stronger controls, and better response procedures
Develop and continuously improve incident response strategy, severity models, communications protocols, after-action reviews, and remediation tracking
Establish executive reporting on incident trends, SOC performance, detection quality, threat hunting outcomes, operational capacity, readiness gaps, and enterprise risk

What we offer

Medical, prescription, vision, and dental insurance for eligible employees
401(k) savings plan with dollar-for-dollar matching up to the first 6% of your pay
Paid time off including eight observed company holidays and flex time
Exclusive perks + discounts, including tuition assistance, commuter benefits and more

Fulltime

Senior Cyber Security Analyst – Incident Response & SOC

We don’t hang up the leash until the job is done. Senior Cyber Security Analyst ...

Location

Salary:

Not provided

Zeektek

Expiration Date

Until further notice

Requirements

Email security fundamentals (SPF, DKIM, DMARC)
Phishing and malware investigations
DFIR / forensic investigation skills
Deep incident response experience
Threat analysis across multiple log sources
Hands-on tooling knowledge (EDR, SIEM, malware analysis, endpoint/network forensics)
Strong troubleshooting and scenario-based thinking
Strong written and verbal communication skills
Working knowledge of Data Loss Prevention concepts/products, Data Encryption concepts, and endpoint management
Technical knowledge of common network protocols and design patterns including TCP/IP, HTTPS, FTP, SFTP, SSH, RDP, CIFS/SMB, NFS

Job Responsibility

Leading investigations and serving as a subject matter expert while correlating data across multiple log sources and systems
Continually improving cyber security procedures and documentation to enhance the security posture of the organization
Communicating with users, vendors, and other IT personnel on security-related issues, providing expert guidance and support
Staying up to date on evolving cyber threats, identifying their impact, and detecting them in our environment
Managing infrastructure security systems such as HIDS/NIDS, SIEM, NGAV, EDR, UBA, WAF, DLP, and vulnerability management tools to meet regulatory requirements
Collaborating with business groups to establish and maintain strong working relationships

What we offer

Weekly Direct Deposit
401K Matching
Competitive medical, dental and vision insurance
Consistent communication throughout your project
ZeekTek Referral Program

Senior Cloud Security Analyst

Reporting to the Global Head of Security under Product Security, the Sr Cloud Se...

Location

India , Hyderabad

Salary:

Not provided

Alter Domus

Expiration Date

Until further notice

Requirements

Bachelor’s degree in computer science, Information Security, or related professional experience
6+ years’ experience in cloud security
3+ years hand-on experience working with containerized environments
Excellent understanding of Azure, AWS, k8s
Experience working with cloud security posture management tooling
Hands-on experience on threat modeling and security architecture reviews
Hands-on experience of working with compliance requirements and turning them to technical controls
Knowledge of cloud security best practices and industry standards
Strong analytical and problem-solving skills
Ability to think critically and make data-driven decisions

Job Responsibility

Design and implement security controls across AWS, Azure environments
Continuously enhance our cloud security posture management (CSPM) program to identify and remediate risks in configurations and policies
Ensure SOC 2 cloud security controls are always executed and auditable
Oversee security for containerized applications and Kubernetes clusters
Establish best practices for container image security, pod security policies, and cluster network segmentation to protect our microservices
Ensure cloud systems and solutions are secure by design and champion a secure guardrails approach
Conduct continuous vulnerability and compliance validation to ensure ongoing adherence to security policies and regulations
Monitor cloud environments for security incidents and ensuring rapid response through automated mechanisms
Serve as subject matter expert on cloud technologies and security solutions
Perform technical security design, architecture, change and/or configuration audits/reviews on our hosting environments including Azure & AWS, servers, network devices, endpoints, and security technologies deployed (CNAPP, MDM, WAF, DDoS, etc.)

What we offer

Flexible arrangements, generous holidays, plus an additional day off for your birthday
Continuous mentoring along your career progression
Active sports, events and social committees across our offices
24/7 support available from our Employee Assistance Program
The opportunity to invest in our growth and success through our Employee Share Plan

Fulltime

Cloud Security Analyst

The Cloud Security Analyst will support the organization’s cloud security progra...

Location

United States , East Rutherford

Salary:

Not provided

Renner Brown

Expiration Date

Until further notice

Requirements

Preferred certifications include Security+ or relevant security-AWS certifications.
Bachelor’s Degree in Computer Science, Information Systems, or other related field. Or equivalent work experience.
Typically has 4 to 6 years of combined IT and security work experience with a broad range of exposure to systems analysis, application development, database design and administration
2 to 4 years of experience with information security.
Must be familiar with general security controls and incident management.
History of ensuring compliance with both SOX and PCI.
Articulate and maintain a solid understanding of various technology capabilities present in Amazon Web Services (AWS), Microsoft Azure, or other similar providers.
Knowledge of "AWS" Platform preferably 2+ years AWS/Kubernetes experience or container-based technology
Strong hands-on experience with AWS services (EC2, S3, IAM, VPC, Lambda, etc.)
Familiarity with monitoring tools (CloudWatch, Prometheus, Grafana).

Job Responsibility

Design, implement, and maintain secure cloud foundations and landing zones with transferable governance across cloud providers, primarily in AWS & Azure. Support cloud migration projects from on-premises environments.
Design and develop cloud security strategy, standards and requirements alongside security best practices.
Deploy and manage cloud security technologies such as CASB, cloud security posture management (CSPM), and other cloud-native security controls to improve visibility and enforce security policies across cloud environments
Govern cloud identity and access management (IAM) including role-based access controls, service accounts, privileged access management, and integration with enterprise identity providers
Work closely with application teams, infrastructure engineers, and solution architects to design, build, and operate secure, scalable cloud platforms. Provide technical guidance throughout cloud adoption and modernization efforts.
Work with both internal and external auditors to ensure compliance with all relevant regulations including, but not limited to, SOX and PCI
Securely guide Saas solutions to meet security and business requirements, ensuring compliance with cloud security, identity management, encryption, and responsible AI guidelines
Evaluating new cloud services, platform capabilities, and AI infrastructure tooling for adoption
Provide Tier 3 support for cloud-related security incidents, partnering with Security Operations to investigate suspicious activity, validate detections, and remediate security issues within cloud platforms

Select Country

Managed Cloud Detection and Response Analyst

Job Description

Job Responsibility

Requirements

Looking for more opportunities?

Managed Cloud Detection and Response Analyst

Managed Cloud Detection and Response Analyst

Sr Incident Response Analyst

Incident Response Analyst

Cloud Security Analyst

Director, Security Operations and Incident Response

Senior Cyber Security Analyst – Incident Response & SOC

Senior Cloud Security Analyst

Cloud Security Analyst

Our AI answers in your language