Monitor, investigate, and respond to security alerts across cloud, endpoint, network, and identity platforms, validating threats and determining appropriate response actions. Execute mitigation and remediation actions within AWS and Azure environments, including access revocation, configuration changes, policy updates, and resource isolation. Build, tune, and maintain detections in SIEM, EDR, and cloud-native security tools to improve alert fidelity and reduce noise. Materially contributes to incident response activities, including triage, containment, eradication, recovery, and post-incident lessons learned. Perform root-cause analysis on security incidents and near-misses and drive corrective actions to prevent recurrence. Develop, maintain, and execute security runbooks, response playbooks, and operational documentation to ensure consistent and repeatable response. Implement and support automation and response workflows using scripting, APIs, and cloud-native tooling to reduce MTTR. Partner with cloud, infrastructure, and application teams to remediate findings, harden systems, and reduce attack surface. Support threat hunting activities using logs, telemetry, and attacker TTPs to identify suspicious or malicious behavior not detected by existing alerts. Assist with vulnerability management, including validation of findings, prioritization based on risk, and remediation tracking. Monitor cloud environments for misconfigurations, control failures, and drift, and take corrective action as required. Contribute to tabletop exercises, purple team activities, and continuous defensive improvement efforts. Stay current with emerging threats, technologies, and industry best practices, recommending strategies to evolve the organization’s security defenses. Other activities as may be assigned by your manager Qualifications/ Requirements Bachelor’s degree in information security, Computer Science, or related field (or equivalent experience). Experienced professional with 5+ years of industry and/or relevant experience, typically at a Senior Analyst or Analyst level role or external equivalent. 3-5 years of professional experience in information security with progressive responsibility preferred Strong knowledge of SIEM, DLP, e-mail security, endpoint security, and cloud security technologies. Hands-on experience securing and operating within AWS and Azure environments, including identity, networking, and native security services. Working knowledge of infrastructure-as-code, scripting, or automation technologies (e.g., Terraform, CloudFormation, PowerShell, Python, or similar). Ability to execute security remediation actions using cloud consoles, APIs, and automation tools. Expertise in incident response, threat hunting, and security operations. Familiarity with risk management frameworks and compliance standards (NIST, CIS, etc.). Relevant certifications such as Security+, CySA+, GCIA, GCIH, AWS Certified Security – Specialty, Azure Security Engineer (AZ-500), SC-200, or equivalent cloud and security operations certifications are strongly preferred. Excellent problem-solving, analytical, and communication skills.