The Role
Lead L3 security investigations and incident response for cloud and on-prem infrastructure. Monitor SIEM/EDR/IDS, perform root-cause analysis, vulnerability assessments, and penetration tests. Implement cloud security controls (AWS/Azure/GCP), IAM, container security, SOAR automation, and compliance audits. Mentor junior analysts and provide regular security reporting.
Summary Generated by Built In
We are seeking a highly skilled Senior Operations Analyst with expertise in Cybersecurity and Cloud/Infrastructure Security at an L3 support level. The ideal candidate will play a critical role in monitoring, analyzing, and securing the organization’s cloud and on-premises infrastructure, acting as the last line of escalation for complex security incidents and ensuring robust defenses against cyber threats.
RequirementsKey Responsibilities:
Cybersecurity Operations:
- Lead investigation and resolution of complex security incidents and breaches, coordinating with L1 and L2 teams as necessary.
- Monitor security tools and platforms (SIEM, EDR, IDS/IPS) to detect threats and mitigate vulnerabilities.
- Perform root-cause analysis for incidents, implementing preventative measures and documenting lessons learned.
- Conduct penetration tests and vulnerability assessments, ensuring remediation plans are implemented effectively.
- Develop and enforce security policies, procedures, and guidelines to protect sensitive data and systems.
- Design and implement robust security controls for cloud platforms (AWS, Azure, GCP) and hybrid environments.
- Manage identity and access management (IAM), ensuring least privilege principles are applied across the infrastructure.
- Conduct regular audits and assessments to validate compliance with security standards and regulations (e.g., GDPR, ISO 27001).
- Protect virtualized environments and containers using tools like Kubernetes security, Docker, or Azure Kubernetes Service (AKS).
- Monitor cloud environments for misconfigurations, unauthorized changes, or suspicious activity using tools like Prisma Cloud, Microsoft Defender for Cloud, or AWS Security Hub.
- Stay updated on the latest cybersecurity trends, threats, and vulnerabilities to ensure proactive protection measures.
- Collaborate with Threat Intelligence teams to analyze emerging risks and recommend appropriate countermeasures.
- Develop and execute incident response playbooks for cloud and infrastructure-specific scenarios.
- Implement automation solutions to improve detection, response, and remediation times using tools like SOAR platforms (e.g., Splunk Phantom, Palo Alto Cortex XSOAR).
- Optimize security tool performance and conduct regular health checks to ensure systems are running efficiently.
- Drive continuous improvement in operational processes by identifying inefficiencies and proposing enhancements.
- Partner with DevOps, CloudOps, and IT teams to ensure seamless integration of security measures into infrastructure workflows.
- Provide regular security reports and metrics to leadership, highlighting trends, risks, and mitigations.
- Mentor and train junior analysts in advanced security operations and best practices.
Technical Skills:
- Strong expertise in Cybersecurity domains: threat hunting, incident response, vulnerability management, and penetration testing.
- Advanced knowledge of cloud security tools and frameworks for AWS, Azure, and GCP.
- Proficiency with security tools: SIEM (Splunk, QRadar, Sentinel), EDR (CrowdStrike, Carbon Black), IDS/IPS (Snort, Suricata).
- Experience with encryption technologies, firewalls, VPNs, and Zero Trust architectures.
- Proficiency in scripting or programming (Python, Bash, PowerShell) for security automation.
- 5+ years in cybersecurity or IT security roles, with at least 2 years in cloud/infrastructure security.
- Proven experience in handling L3 escalations for complex security incidents.
- Familiarity with regulatory compliance standards (e.g., NIST, GDPR, PCI DSS, ISO 27001).
- Strong analytical and critical thinking skills to resolve complex security challenges.
- Excellent communication skills for cross-functional collaboration and incident reporting.
- Ability to work effectively under pressure and manage multiple priorities.
- Certifications: CISSP, AWS Certified Security - Specialty, Microsoft Certified: Security, Compliance, and Identity Fundamentals, or CCSP.
- Experience with DevSecOps practices and CI/CD pipeline security.
- Familiarity with security in containerized environments (Kubernetes, Docker).
Skills Required
- 5+ years in cybersecurity or IT security roles, with at least 2 years in cloud/infrastructure security
- Proven experience handling L3 escalations for complex security incidents
- Expertise in threat hunting, incident response, vulnerability management, and penetration testing
- Advanced knowledge of cloud security for AWS, Azure, and GCP
- Proficiency with SIEM (Splunk, QRadar, Sentinel), EDR (CrowdStrike, Carbon Black), and IDS/IPS (Snort, Suricata)
- Experience with encryption technologies, firewalls, VPNs, and Zero Trust architectures
- Proficiency in scripting/programming for automation (Python, Bash, PowerShell)
- Familiarity with compliance standards (NIST, GDPR, PCI DSS, ISO 27001)
- Strong analytical, communication, and prioritization skills; ability to work under pressure
- Certifications such as CISSP, AWS Certified Security - Specialty, Microsoft Security certifications, or CCSP
- Experience with DevSecOps practices and CI/CD pipeline security
- Experience with container security and orchestration (Kubernetes, Docker, AKS)
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Blue Pearl is a market-leading CLOUD Solutions developer with extensive knowledge and insight into the latest technologies, standardised processes, advanced technical capabilities and consulting processes available, ensuring wholistic success for our clientele. We offer professional consulting to compliment your business strategy and overall management and make it our priority to add value to any business by listening, analysing and creating a conducive solution that will empower our client. We implement a Data Analysis Process that includes inspecting, cleansing, transforming, and modelling data with the end-goal of discovering useful information, informing conclusions, and relevant information to support your decision-making. Your business cannot afford not to engage with us, allowing our data analysis to play a role in making your business decisions more scientific and helping your business achieve effective operation. Blue Pearl’s team of experts include BI strategists, BI analysts, Data Warehouse Architects, Data Scientists, Implementation and Development experts. With the use of BI, Analytics and Big Data, we effectively partner with our customers on their mission to achieve a competitive business advantage and real ROI from the structured information we collect.
