We are seeking a Senior Security Engineer to help monitor, investigate, and respond to security activity across cloud, identity, endpoint, and Linux-based environments. This role requires hands-on technical ability, strong scripting skills, and practical experience working with AWS, with GCP experience preferred.

• Monitor and investigate security alerts across cloud, identity, endpoint, and network environments.
• Review logs and activity from AWS, GCP, Active Directory, Linux systems, Windows systems, and security tools.
• Support incident response by gathering evidence, validating suspicious activity, and documenting findings.
• Write scripts to automate repetitive security tasks, log analysis, reporting, or enrichment.
• Assist with security reviews, including IAM, storage exposure, compute workloads, and network configurations.
• Investigate authentication activity, user behavior, privilege changes, and potential account compromise.
• Work with internal teams to understand systems, identify risks, and support remediation, compliance and audit activities.
• Be available for after-hours incident response when urgent security events require investigation or support.

• Experience with cloud security concepts, services, logs, and IAM.
• Strong scripting ability, preferably with Python, Bash, or PowerShell.
• Experience with SIEM platforms such as Splunk, Chronicle, Sentinel, or similar tools.
• Working knowledge of Linux and Windows systems, command line usage, permissions, processes, and logs.