Cloud Security Engineer
Foresite Cybersecurity · Overland Park, KS · 2 wk ago
RemoteRemoteInformation TechnologyFull-time
What You'll Do
- Lead the hands-on configuration of GCP SCC and Wiz for new customers, ensuring all high-fidelity security findings are correctly ingested into Google SecOps.
- Ensure technical accuracy in parser creation and UDM mapping to maintain the highest quality of security data.
- Write custom YARA-L detection rules to correlate cloud posture findings with network traffic.
- Develop end-to-end SOAR Playbooks and utilize Python to write logic for custom actions, streamlining the customer's remediation workflows.
- Lead sessions for customer analysts, teaching them how to navigate SCC/Wiz findings and investigate alerts within the Google SecOps interface.
- Act as the technical point of contact for resolving integration errors and optimizing automation scripts.
Who You Are
- SecOps Expert: Strong hands-on experience with Google SecOps (Chronicle), including parser creation, UDM mapping, and YARA-L rule writing.
- Cloud Specialist: Proven experience configuring GCP SCC and Wiz, with foundational knowledge equivalent to a Google Cloud Associate Cloud Engineer.
- Automation Minded: Proficient in Python and experienced in solving complex security automation challenges.
- Independent Driver: Ability to manage a customer onboarding from technical kickoff to final handoff without constant senior oversight.
- Strategic Communicator: Can translate deep technical configurations into actionable insights for customer security teams.
Nice to Have
- Certified Professional: Current Google Cloud Associate Cloud Engineer or professional security certifications.
- Advanced Scripting: Experience building complex API integrations between cloud security platforms.
- Architectural Vision: Experience advising customers on cloud security best practices and long-term posture management.