01Overview
Key Responsibilities
Cloud Security Triage & Advisory :
Review and triage AI-generated cloud security alerts across AWS and Azure environments. Validate whether identified risks are genuine, prioritize them based on business and technical impact, and recommend practical remediation steps. Guide customers through cloud security issues such as excessive permissions, exposed services, insecure network paths, storage misconfigurations, logging gaps, key management weaknesses, and compliance deviations. Explain findings clearly to both technical stakeholders and senior customer leaders. Respond to questions from customer DevOps, platform, infrastructure, and application teams. Support incident investigation and root cause analysis for cloud-related security events.
AWS & Azure Security Operations
Assess and improve security posture across AWS and Azure services. Work with services such as IAM, Organizations, Control Tower, VPC, EC2, S3, RDS, Lambda, CloudTrail, GuardDuty, Security Hub, Config, KMS, WAF, and related AWS security services. Work with Azure services such as Entra ID, Azure Policy, Defender for Cloud, Key Vault, Network Security Groups, VNets, Storage Accounts, Sentinel, Log Analytics, Azure Firewall, and related Azure security capabilities. Review identity and access models, network architecture, logging, monitoring, encryption, secrets management, and workload security. Help customers align cloud environments with internal security policies and external frameworks where applicable.
DevOps & Cloud Operations
Support broader cloud operations beyond security, including infrastructure troubleshooting, deployment issues, access problems, networking, monitoring, and reliability concerns. Work with Infrastructure as Code tools such as Terraform, CloudFormation, ARM/Bicep, or similar. Review and improve CI/CD pipelines from a security, reliability, and operational perspective. Assist with Kubernetes, containers, serverless, and cloud-native deployment patterns where required. Collaborate with customer DevOps teams to resolve operational issues and improve cloud engineering practices. Help define repeatable runbooks, remediation playbooks, and automation patterns.
Customer Communication & Delivery
Serve as a trusted advisor to customers on cloud security and cloud operations. Translate complex technical findings into clear, practical recommendations. Join customer calls to explain risks, remediation options, trade-offs, and priorities. Work closely with internal engineering and AI teams to improve alert quality, reduce false positives, and enhance automation workflows. Document findings, decisions, remediation steps, and customer guidance clearly.
Required Skills & Experience
Deep hands-on experience securing and operating cloud environments in both AWS and Azure. Strong understanding of cloud identity, networking, compute, storage, logging, monitoring, encryption, and security services. Experience triaging cloud security alerts, misconfigurations, vulnerabilities, and incidents. Ability to distinguish between theoretical risk and real operational/business impact. Strong working knowledge of DevOps practices, CI/CD pipelines, infrastructure automation, and production operations. Experience with Terraform, CloudFormation, ARM/Bicep, or similar Infrastructure as Code tools. Ability to read and understand scripts, automation workflows, and configuration files. Strong troubleshooting skills across cloud infrastructure, access control, networking, and application deployment issues. Excellent customer-facing communication skills. Ability to work independently, make sound judgments under time pressure, and explain decisions clearly.
Required Skills & Competencies
Experience with Kubernetes, Docker, EKS, AKS, or other container platforms. Experience with SIEM, SOAR, CSPM, CNAPP, or cloud security posture management platforms. Familiarity with security frameworks such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS, or similar. Experience working in a managed security services, consulting, cloud operations, or customer advisory role. Certifications such as AWS Certified Security Specialty, AWS Solutions Architect, Azure Security Engineer Associate, Azure Solutions Architect Expert, or equivalent. Experience working with AI-driven security tools or automated alert triage systems. Scripting experience in Python, PowerShell, Bash, or similar.
(ref:hirist.tech) .
