Cloud SOC Analyst

Cloud Security SOC Analyst at Datafence

Position Overview:

Datafence is seeking an experienced Cloud Security SOC Analyst to monitor, detect, and respond to security threats across cloud environments. In this role, you'll be instrumental in protecting cloud infrastructure and helping our clients maintain robust security postures across their public cloud deployments.

We're looking for a security professional who combines traditional SOC expertise with deep knowledge of cloud security principles and technologies. The ideal candidate will understand both cloud-native security tools and traditional security monitoring approaches, enabling comprehensive threat detection across hybrid environments.

Key Responsibilities:

• Monitor security events across multiple cloud platforms (AWS, Azure, GCP) using cloud-native and third-party security tools

• Investigate and respond to security alerts from cloud infrastructure

• Perform cloud-specific threat hunting activities focusing on cloud misconfigurations and identity-based attacks

• Analyze cloud audit logs and CloudTrail events for suspicious activities

• Develop and maintain cloud-specific detection rules and response playbooks

• Conduct security assessments of cloud infrastructure and services

• Collaborate with cloud infrastructure teams on security architecture improvements

• Support incident response activities in cloud environments

• Help maintain cloud security compliance requirements

Required Qualifications:

• 3+ years of experience in Security Operations

• Strong understanding of cloud security principles and best practices

• Experience with cloud-native security tools (AWS Security Hub, Azure Security Center, GCP Security Command Center)

• Knowledge of cloud logging and monitoring solutions

• Familiarity with Infrastructure as Code and container security

• Experience with SIEM platforms and log analysis

• Understanding of identity and access management in cloud environments

• Basic scripting abilities in Python, PowerShell, or similar

• Knowledge of common cloud attack vectors and threat actor TTPs

Preferred Qualifications:

• Cloud certifications (AWS Security, Azure Security Engineer, GCP Security Engineer)

• Security certifications (Security+, CCSP, CISSP)

• Experience with cloud security posture management (CSPM) tools

• Knowledge of container orchestration security (Kubernetes)

• Familiarity with serverless security concepts

• Experience with cloud compliance frameworks (CIS Benchmarks, CCM)

• Experience with cloud-native incident response

Technical Skills:

• Cloud Platforms: AWS, Azure, GCP

• Security Tools: Cloud-native security services, Prisma Cloud, CloudGuard, Lacework

• SIEM: Splunk Cloud, Azure Sentinel, Chronicle

• IaC: Terraform, CloudFormation

• Containers: Docker, Kubernetes

• Automation: Python, PowerShell, AWS Lambda

What We Offer:

• Exposure to multi-cloud environments and very interesting customers

• Competitive compensation package

• Access to cutting-edge cloud security tools

• Career advancement opportunities in cloud security

About Us:

At Datafence, we recognize that cloud security requires a unique blend of traditional security knowledge and cloud expertise. We're building a team that can adapt to the rapidly evolving cloud security landscape while maintaining robust security operations.

We value continuous learning and provide our team members with opportunities to expand their cloud security expertise through training, certifications, and hands-on experience with the latest cloud security technologies.

How to Apply:

If you're passionate about cloud security and want to be at the forefront of protecting cloud-native environments, we want to hear from you. Please submit your resume and a cover letter explaining your cloud security experience and why you'd be a great fit for our Cloud Security SOC team.

Datafence is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.