Orca Cloud Security Expert
Summary
Runs day-to-day operations of the Orca Security platform across multi-cloud environments (AWS, Azure, GCP), triaging security alerts, investigating incidents, tracking remediation via ticketing tools, and tuning detections to reduce false positives and strengthen security posture. Hybrid role based in Pune.
Summary:
The Orca Cloud Security Expert plays a critical role in managing and optimizing the Orca Security platform across multi-cloud environments. This position focuses on the continuous improvement of security operations, ensuring effective governance and incident management for enhanced security posture.
Main Responsibilities:
Manage day-to-day operations of the Orca platform, ensuring continuous monitoring of cloud environments.
Perform triage and analysis of security alerts (Critical/High/Medium).
Conduct incident investigation and risk analysis using Orca capabilities.
Maintain dashboards, KPIs, and operational reporting for stakeholders.
Ensure service continuity, availability, and SLA adherence.
Act as the central interface between security and IT operations teams (Cloud, Infra, App teams).
Translate Orca findings into clear remediation actions and technical recommendations.
Create and follow up remediation tickets (e.g., Helix/Jira) and track progress to closure.
Drive prioritization based on severity, business risk, and exposure.
Continuously optimize detection rules, alert tuning, and vulnerability classification.
Reduce false positives and improve signal-to-noise ratio.
Enhance and maintain runbooks, processes, and automation workflows.
Ensure continuous visibility of risks and vulnerabilities across cloud environments.
Support compliance monitoring and reporting.
Collaborate with Cloud, SOC, and DevOps teams.
Key Requirements:
Experience with multi-cloud security environments (AWS, Azure, GCP).
Proficiency in using Orca Security platform.
Strong understanding of cloud security best practices (CNAPP, CSPM).
Experience in risk analysis and incident management.
Knowledge of security compliance requirements.
Nice to Have:
Experience with DevSecOps practices.
Familiarity with ticketing systems like Helix/Jira.
Experience in automation workflows.
Background in security reporting and dashboard creation.
Other Details:
Location: Pune Hybrid.
Team Structure: Works closely with Cloud, Infra, and Application teams.
Reporting Lines: Reports to Security Operations Lead.
Notice Period: Looking for candidates who can join immediately or have a notice period of up to 15–20 days