Orca Cloud Security Expert

Summary:

The Orca Cloud Security Expert plays a critical role in managing and optimizing the Orca Security platform across multi-cloud environments. This position focuses on the continuous improvement of security operations, ensuring effective governance and incident management for enhanced security posture.

Main Responsibilities:

• Manage day-to-day operations of the Orca platform, ensuring continuous monitoring of cloud environments.

• Perform triage and analysis of security alerts (Critical/High/Medium).

• Conduct incident investigation and risk analysis using Orca capabilities.

• Maintain dashboards, KPIs, and operational reporting for stakeholders.

• Ensure service continuity, availability, and SLA adherence.

• Act as the central interface between security and IT operations teams (Cloud, Infra, App teams).

• Translate Orca findings into clear remediation actions and technical recommendations.

• Create and follow up remediation tickets (e.g., Helix/Jira) and track progress to closure.

• Drive prioritization based on severity, business risk, and exposure.

• Continuously optimize detection rules, alert tuning, and vulnerability classification.

• Reduce false positives and improve signal-to-noise ratio.

• Enhance and maintain runbooks, processes, and automation workflows.

• Ensure continuous visibility of risks and vulnerabilities across cloud environments.

• Support compliance monitoring and reporting.

• Collaborate with Cloud, SOC, and DevOps teams.

Key Requirements:

• Experience with multi-cloud security environments (AWS, Azure, GCP).

• Proficiency in using Orca Security platform.

• Strong understanding of cloud security best practices (CNAPP, CSPM).

• Experience in risk analysis and incident management.

• Knowledge of security compliance requirements.

Nice to Have:

• Experience with DevSecOps practices.

• Familiarity with ticketing systems like Helix/Jira.

• Experience in automation workflows.

• Background in security reporting and dashboard creation.

Other Details:

• Location: Pune Hybrid.

• Team Structure: Works closely with Cloud, Infra, and Application teams.

• Reporting Lines: Reports to Security Operations Lead.

• Notice Period: Looking for candidates who can join immediately or have a notice period of up to 15–20 days