Orca Cloud Security Expert

• Experience with multi-cloud security environments (AWS, Azure, GCP).
• Proficiency in using the Orca Security platform.
• Strong understanding of cloud security best practices (CNAPP, CSPM).
• Experience in risk analysis and incident management.
• Knowledge of security compliance requirements.

Nice to have:

• Experience with DevSecOps practices.
• Familiarity with ticketing systems like Helix/Jira.
• Experience in automation workflows.
• Background in security reporting and dashboard creation.

• Manage day-to-day operations of the Orca Security platform, ensuring continuous monitoring of cloud environments.
• Perform triage and analysis of security alerts (Critical/High/Medium).
• Conduct incident investigation and risk analysis using Orca capabilities.
• Maintain dashboards, KPIs, and operational reporting for stakeholders.
• Ensure service continuity, availability, and SLA adherence.
• Act as the central interface between security and IT operations teams (Cloud, Infra, App teams).
• Translate Orca findings into clear remediation actions and technical recommendations.
• Create and follow up remediation tickets (e.g., Helix/Jira) and track progress to closure.
• Drive prioritization based on severity, business risk, and exposure.
• Continuously optimize detection rules, alert tuning, and vulnerability classification.
• Reduce false positives and improve signal-to-noise ratio.
• Enhance and maintain runbooks, processes, and automation workflows.
• Ensure continuous visibility of risks and vulnerabilities across cloud environments.
• Support compliance monitoring and reporting.
• Collaborate with Cloud, SOC, and DevOps teams.

Location: Pune Hybrid. Works closely with Cloud, Infra, and Application teams. Reports to Security Operations Lead. Looking for candidates who can join immediately or have a notice period of up to 15–20 days.

Data privacy notice: Personal data is processed by emagine Polska as the administrator with rights regarding data access, correction, deletion, restriction, objection, portability, and complaint. Data processing is for recruitment purposes with mandatory and voluntary data distinctions and possible data sharing with Just Join IT and associated entities.