IT - Security Operations Specialist

Description

About AllCloud

AllCloud is a leader in amplifying organizations’ cloud potential through AI. With a track record of hundreds of successful migrations and implementations across AWS and Salesforce, AllCloud has developed strategies and solutions that enable businesses of all sizes to remain at the forefront of innovation.

AllCloud is a leader in AI-led professional and managed services. As an AWS Premier and audited managed services Partner, and Salesforce Consulting partner, AllCloud provides comprehensive AI-led cloud journey support, from initial migration to ongoing management through our Engage Managed Services. Our expertise ensures that clients remain aligned with ecosystem best practices while focusing on their core business growth.

AllCloud serves clients across the globe with offices in EMEA and North America.

About the Role

We're looking for a hands-on Security Operations Engineer in Romania to join our global Information Security team, reporting directly to the CISO. You'll protect AllCloud's corporate environment, cloud workloads, and customer trust. That covers detection, incident response, vulnerability management, and supporting our compliance programs (SOC 2, ISO 27001).

What You'll Do

• Monitor, investigate, and respond to security alerts across cloud, endpoint, identity, and SaaS environments
• Improve incident response processes: playbooks, triage, containment, post-incident reviews, and reporting
• Build and tune detections and correlation rules in SIEM/XDR platforms
• Run vulnerability management: scan, prioritize, track fixes with IT and engineering, and report on progress
• Automate security workflows with scripting and SOAR, or with serverless or GenAI tools
• Run phishing simulations and security awareness work
• Work with IT, DevOps, Legal and business teams across AllCloud's global offices to embed security into daily operations
• Support audits and compliance work (SOC 2, ISO 27001): gather evidence, monitor controls and maintain policies, including in GRC platforms

Requirements

What You Bring

• 5+ years in security operations, SOC, incident response, or a similar security engineering role
• Strong hands-on experience securing AWS environments
• Experience with SIEM/XDR/EDR tools
• Solid understanding of networking, Windows/Linux, identity, and common attack techniques (MITRE ATT&CK)
• Experience in incident response from detection through remediation
• Scripting skills in Python, PowerShell, or Bash
• Strong analytical and communication skills; you can explain risk to technical and non-technical people
• Fluent English, written and spoken
• Able to work across time zones with distributed teams

Nice to Have

• AWS Security Specialty, Security+, CySA+, GCIH, GCIA or similar certifications
• Experience with SOAR, Infrastructure as Code (Terraform / CloudFormation) or detection-as-code
• Experience with AWS security
• Background at an MSSP or a cloud consulting company
• Experience with SOC 2 / ISO 27001 audits and GRC tools 

Why work for us? 

Our team inspires progress in each other and in our customers through our relentless pursuit of excellence; you will work with leaders who promote learning and personal development.

AllCloud is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics or any other basis forbidden under federal, provincial, or local law.