Cloud Detection & Response Engineer
Cloud Detection & Response EngineerRemote — European Union. Company based in Helsinki, Finland.Cybersecurity SaaS | Cloud Detection | Detection Engineering | Security AutomationOur client, a growing Cybersecurity SaaS company based in Helsinki, is looking for a Cloud Detection & Response Engineer to build cloud-native detections and automated response capabilities protecting enterprise AWS environments.You'll work at the intersection of Detection Engineering, Cloud Security, and Security Automation, turning AWS telemetry and attacker behaviour into scalable detections and automated response workflows.What You'll Work On• Build and maintain detections for threats targeting AWS environments• Analyse CloudTrail and other cloud telemetry to identify suspicious behaviour• Develop detection logic using Sigma and SIEM platforms• Build security automation and response tooling in Python• Create automated investigation and remediation workflows using SOAR• Map detection coverage against MITRE ATT&CK techniques• Develop detections for identity abuse, privilege escalation, credential compromise, and cloud persistence• Tune detection logic to improve signal quality and reduce false positives• Automate enrichment and triage of cloud security alerts• Investigate emerging cloud attack techniques and translate them into production detections• Collaborate with Incident Response and Cloud Security teams to improve detection and response coverageCore Skills• 4+ years in Detection Engineering, Cloud Security, Incident Response, Security Engineering, or similar roles• AWS security• Python• SIEM technologies• Sigma detection rules• AWS CloudTrail• SOAR / security automation• MITRE ATT&CK• Strong understanding of cloud attack techniques and incident responseNice to HaveAWS GuardDuty / Security HubDetection-as-CodeSplunk / Elastic / Microsoft SentinelIAM attack-path analysisAWS OrganizationsTerraformThreat intelligenceCloud forensicsGit-based detection pipelinesExperience investigating real-world AWS compromises