{"id":3524069,"url":"https://alion.io/job/allcloud-cloud-security-operations-specialist","title":"Cloud Security Operations Specialist","company":{"id":36623,"name":"AllCloud","domain":"allcloud.io","url":"https://alion.io/company/allcloud","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":["RO"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":32000,"max_usd":73000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Boto3","optional":false},{"name":"Datadog","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false},{"name":"Amazon EventBridge","optional":true},{"name":"CI/CD","optional":true},{"name":"Datadog Cloud Security","optional":true},{"name":"FedRAMP","optional":true},{"name":"ISO 27001","optional":true},{"name":"NIST 800-53","optional":true},{"name":"SIEM","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-30T12:45:32Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-01T04:18:15Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nAbout AllCloud\nAllCloud is a leader in amplifying organizations’ cloud potential through AI. With a track record of hundreds of successful migrations and implementations across AWS and Salesforce, AllCloud has developed strategies and solutions that enable businesses of all sizes to remain at the forefront of innovation.\nAllCloud is a leader in AI-led professional and managed services. As an AWS Premier and audited managed services Partner, and Salesforce Consulting partner, AllCloud provides comprehensive AI-led cloud journey support, from initial migration to ongoing management through our Engage Managed Services. Our expertise ensures that clients remain aligned with ecosystem best practices while focusing on their core business growth.\nAllCloud serves clients across the globe with offices in EMEA and North America. www.allcloud.io\nJob Summary\nThis is a customer-facing engineering role, and the customer-facing half is not optional or secondary. You will lead technical engagements directly: running recurring security reviews, presenting findings to both engineering teams and executive stakeholders, defending your recommendations, and driving remediation that the customer can realistically staff and fund.\nYou'll pair that with hands-on ownership of detective controls, guardrails, and incident response across the customer portfolio. You build the thing, and you explain the thing to the person paying for it.\nYou'll also be the technical authority behind our global SOC. They run the shifts; you make sure what they know is right.\nResponsibilities\nOwn client technical relationships, lead executive/developer security reviews, build prioritized remediation roadmaps, and communicate hard architectural risks directly.\nDeploy and tune AWS native tools (GuardDuty, Security Hub, Config, Inspector, CloudTrail) and Wiz; manage telemetry flowing into Datadog.\nServe as the escalation authority for the SOC team, keeping playbooks updated and tuning detection logic to eliminate false positives.\nLead investigations (timeline, root cause, executive reporting) and develop reusable Python/boto3 scripts for enrichment and containment.\nArchitect security guardrails (SCPs, IAM, network policies) using Terraform or CDK; manage AWS LZA, Identity Center, and automated remediation pipelines.\nWhat's genuinely different about this role.\n We'd rather you hear this from us than discover it in a month or two.\nContext switching is the job. You'll move between customer environments with different architectures, different maturity, and different definitions of \"urgent.\"\nYou work through other people's accounts. Cross-account role design, delegated administration, and access boundaries are core skills here, not an afterthought. Getting access right for us is itself a security control we owe the customer.\nYou don't get to know one estate deeply. The compensating skill is pattern recognition: spotting the same misconfiguration across ten different architectures.\nThe customer is often the constraint. You'll regularly recommend something correct that the customer declines or defers. Learning to document that disagreement, and to keep advocating without becoming an obstacle, matters more here than in an in-house role.\nRequirements\n5+ years in cloud engineering, with at least 2+ years dedicated to AWS security.\nProven track record leading technical reviews, delivering board/exec-ready reports, and advising external clients directly during high-pressure incidents.\nDeep expertise in IAM evaluation logic, SCPs, permission boundaries, cross-account federation, and KMS key architectures.\nHands-on experience developing modular, scalable Terraform or CDK code.\nPractical administration of AWS Organizations, Control Tower, or Landing Zone Accelerator (LZA).\nProficient in Python and boto3 for building production-grade, reusable security tooling and auto-remediations.\nWorking knowledge of mapping PCI DSS or HIPAA controls directly to AWS infrastructure.\nNice to Have\nHands-on experience with AWS LZA (customization repos/nested stacks), Wiz (or similar CNAPP/CSPM), and Datadog Cloud SIEM.\nPrior background in an MSSP, security consultancy, or presales/solutions architecture.\nExperience partnering with a 24/7 SOC to write actionable runbooks, escalation criteria, and tuning operational handoffs.\nBuilding EventBridge-driven auto-remediation, custom Config rules, and blocking CI/CD security gates (SAST/SCA/secrets).\nHands-on network security architecture covering Transit Gateway segmentation, AWS Network Firewall, and VPC traffic inspection.\nExperience mapping infrastructure controls to SOC 2, ISO 27001, NIST 800-53, or FedRAMP.\nAWS Security Specialty or Solutions Architect Professional Certification\nWhy work for us? \nOur team inspires progress in each other and in our customers through our relentless pursuit of excellence; you will work with leaders who promote learning and personal development. We offer competitive salaries, bonus incentives, benefits, flexible hours, and mentoring. Apply now to become part of the team. \nAllCloud is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics or any other basis forbidden under federal, provincial, or local law.","description_format":"text","description_chars":5324,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Romania","iso":"RO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Enterprise Apps Implementation Partners","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-30T13:22:51Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":13,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/allcloud-cloud-security-operations-specialist","json_url":"https://alion.io/job/allcloud-cloud-security-operations-specialist.json","meta":{"generated_at":"2026-11-01T06:11:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9637,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":36623},"rest":"https://alion.io/mcp/rest/get_company?id=36623"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fallcloud-cloud-security-operations-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fallcloud-cloud-security-operations-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fallcloud-cloud-security-operations-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/allcloud-cloud-security-operations-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fallcloud-cloud-security-operations-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3524069}},{"tool":"search_jobs","arguments":{"company":"allcloud.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3524069},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}