Cloud Security Incident Analyst - Global Investment Bank

Salary: $100 – $130 per hour

Join a highly regarded global organisation as part of a specialist Cloud Security Operations team, where you'll play a key role in detecting, investigating, and responding to cyber threats across modern cloud platforms. This position offers the opportunity to work within a mature security environment supporting Azure, AWS, GCP, and SaaS technologies while collaborating with security professionals across APAC, Europe, and North America.

What You'll Be Doing

• Investigate and manage cloud security incidents from initial alert triage through to resolution and post-incident analysis.

• Monitor and analyse security events across multi-cloud environments and SaaS platforms using SIEM and logging technologies.

• Identify malicious activity, assess potential impact, and coordinate appropriate containment and remediation actions.

• Review large volumes of log data to uncover attack patterns, anomalous behaviour, and emerging threats.

• Enhance threat detection capabilities by refining existing alerts and contributing to the development of new detection use cases.

• Partner with global security teams and stakeholders to strengthen incident response processes and cloud security controls.

What We're Looking For

• 2-5 years of experience within a Security Operations Centre (SOC), Cloud SOC, Incident Response, or Threat Detection environment.

• Hands-on experience investigating cybersecurity incidents within Azure, AWS, or GCP.

• Strong analytical and problem-solving skills with the ability to independently drive investigations.

• Experience working with SIEM platforms such as Splunk, Elasticsearch, Microsoft Sentinel, or similar monitoring solutions.

• Understanding of security operations, threat detection, incident response, and enterprise IT environments.

• Excellent communication skills with the ability to explain technical findings to both technical and non-technical audiences.

Highly Valued Experience

• Exposure to multiple cloud platforms and SaaS security monitoring.

• Detection engineering, alert optimisation, or use case tuning.

• Scripting or automation experience using Python, PowerShell, Bash, or similar technologies.

• Experience supporting large-scale enterprise, regulated, or financial services environments.

Preferred Certifications

• Microsoft Azure certifications

• AWS Cloud or Security certifications

• CCSK, CompTIA Cloud+, or other cloud security qualifications

• Degree in Cyber Security, Computer Science, Digital Forensics, or a related discipline