Cloud Security Operations Engineer (m/f/d)

Join our SOC team as a Cloud Security Operations Engineer. In this hands-on role, you will configure, maintain, and monitor cloud security tools across Microsoft Azure, Microsoft 365, and Google Cloud Platform (GCP), helping protect our cloud workloads and data while supporting incident detection and response.This is a great opportunity to work with industry-leading cloud security technologies and contribute directly to the operational excellence of our SOC. Key Responsibilities:Configure, maintain, and optimize cloud security tools, including Microsoft Defender XDR, Defender for Cloud Apps, Defender for Endpoint, Defender for Identity, Defender for Office 365, Microsoft Sentinel, Purview DLP & IRM, Chronicle SIEM, and GCP Security Command Center.Integrate logs from cloud services and selected on-prem systems, maintaining parsers for custom log sources.Automate security workflows and integrate security controls into CI/CD pipelines.Monitor cloud environments for security alerts and events, supporting timely incident detection and response.Collaborate with SOC analysts to investigate and respond to cloud security incidents.Prepare and maintain operational documentation for security tool configurations, processes, and incident response procedures.Requirements:Hands-on experience with cloud security tools in Azure, Microsoft 365, and GCP.Practical knowledge of XDR and the Microsoft Defender stack, as well as SIEM / SOAR platforms (Microsoft Sentinel, Chronicle) and alerting workflows.Experience with cloud logging and monitoring (Cloud Logging, Cloud Monitoring, Azure Monitor).Ability to automate security processes and integrate security into CI/CD pipelines.Strong documentation skills and attention to detail.Strong communication skills in both English and Polish (B2 or higher).Minimum 3 years of hands-on experience in cloud security operations, with practical knowledge of Azure, Microsoft 365, and GCP security tools.Experience with container security and Kubernetes workloads (GKE, AKS).Familiarity with cloud compliance, CSPM/CWPP, and hardening cloud services.Knowledge of Terraform or ARM templates for security automation.Experience with DLP and data protection in cloud environments.Security alert tuning, threat hunting, or SOC workflow optimization.Microsoft: SC-200 (Security Operations Analyst), SC-401 (Cybersecurity Architect), AZ-500 (Azure Security Engineer).Google Cloud: Professional Cloud Security Engineer, Professional Cloud DevOps Engineer, Associate Cloud Engineer.What We offer:Employment based on employment contractFlexible starting hoursPossibility of full remote work / hybrid model (depending on the place of residence)Attractive employee benefits package: private medical care (Luxmed), subsidy for Multisport card, additional benefits tailored to your needs within the cafeteria system, group insurance for employees on preferential termsEnjoy Mindgram – a modern platform offering professional psychological support and wellbeing toolsOpportunity to receive an attractive bonus in the employee referral programPossibility to rent a company car for private use  We are dedicated to creating an inclusive recruitment process that upholds the principles of equal opportunity. Our focus is on candidates' competencies and their willingness to grow, regardless of gender, age, disability, religion, sexual orientation, background, or any other factors unrelated to their qualifications. We go the extra mile to ensure the recruitment process is accessible and thoughtfully tailored to accommodate individual needs.