Ishan Technologies - Cloud Security Engineer - SIEM

About The Job :

As a Cloud Security Engineer, you will play a critical role in safeguarding our cloud infrastructure by designing, implementing, and maintaining robust security architectures in cloud environments, primarily focusing on OpenStack.

You will be responsible for enforcing security best practices, monitoring threats, responding to incidents, and continuously enhancing our cloud security posture to protect sensitive data and services.

Key Responsibilities :

• Design and implement comprehensive network security architectures tailored for cloud environments, with an emphasis on OpenStack platforms.
• Configure and manage firewall rules, Network Access Control Lists (ACLs), and security groups to enforce strict least-privilege access models and minimize exposure to threats.
• Continuously evaluate and optimize cloud security group configurations to reduce the attack surface and prevent unauthorized access.
• Deploy, configure, and maintain virtual firewalls, Web Application Firewalls (WAFs), and Intrusion Detection / Prevention Systems (IDS / IPS) within cloud infrastructure.
• Monitor firewall traffic patterns to detect anomalies and troubleshoot issues impacting network security or performance.
• Collaborate with network and cloud teams to ensure secure network segmentation and traffic flow.
• Deploy and maintain antivirus (AV) and antimalware solutions across all cloud-hosted workloads, including virtual machines (VMs), containers, and serverless components.
• Integrate Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) platforms to enhance threat detection, investigation, and automated response capabilities in cloud environments.
• Ensure regular updates, signature definitions, vulnerability scans, and logging are performed on AV systems to maintain robust endpoint protection.
• Utilize Security Information and Event Management (SIEM) tools to monitor cloud infrastructure for suspicious activity, security policy violations, and potential threats.
• Investigate alerts, analyze network logs, and conduct root cause analysis of security incidents or breaches.
• Develop and implement automated alerts, response playbooks, and remediation workflows for network threats and misconfigurations.
• Work closely with incident response teams and customers to manage and resolve cloud security incidents in a timely and effective manner.
• Maintain accurate documentation of security configurations, incident response procedures, and architectural diagrams for cloud security infrastructure.
• Ensure compliance with internal security policies, industry standards, and regulatory requirements relevant to cloud security.
• Participate in regular security audits, vulnerability assessments, and penetration tests to identify gaps and improve defenses.

Qualifications & Skills :

(ref : hirist.tech)