Job Title: Lead Cloud Security Engineer
Location: Costa Rica
Job Type: Full-Time
Position Summary
The Senior Cloud Security Engineer is responsible for managing and operating Data Loss Prevention (DLP), Security Information and Event Management (SIEM), Endpoint Protection, Endpoint Detection and Response (EDR), and Web Application Firewall (WAF)/DDo S protection across the enterprise. This role focuses on threat detection, particularly within Cloud, network, and application security. The engineer will develop security detection use cases to prevent penetration, fraud, and abuse within our products. Reporting to the VP of Infrastructure, this is a key role in our IT organization.
Essential Duties and Responsibilities

• Manage and configure WAF, SIEM, EDR, DLP, and other security technologies across the enterprise environment, providing expert guidance.
• Collaborate closely with engineering teams to support operations for WAF, Bot Management, and DDo S protection.
• Lead attack simulation tests to validate that detection use cases identify attack patterns within both on-prem and cloud systems.
• Develop threat detection and automated threat remediation use cases using SIEM and related technologies.
• Enhance in-house security tools to detect and respond to custom use cases.
• Work with the Enterprise Security team to improve threat identification, management, and response capabilities efficiently and effectively.
• Administer and optimize security monitoring products, including WAF, SIEM, DDo S protection, and other industry-standard security technologies.
• Leverage Threat Intelligence and conduct threat-hunting activities to identify compromised accounts and systems using EDR and other tools.
• Propose and review security plans and policies to strengthen the organization's security posture.
• Maintain operational playbooks, diagrams, and documentation for security detection and response.
• Review proposed security deployments to ensure compliance with security monitoring requirements.
• Utilize the MITRE ATT&CK and other industry-standard frameworks to build and test detection use cases.
• Provide after-hours support as needed for security administration, detection, and response activities.

Education and/or Work Experience Requirements

• 5+ years of experience in Cloud Infrastructure, Security, and Networking.
• Experience in cloud networking, specifically in AWS, Azure, and GCP environments.
• 5+ years of Security Engineering experience.
• Expert-level knowledge in SIEM, DLP, EDR, WAF, Web Security, DDo S protection, data analytics, and Bot Management.
• Experience developing SIEM/SOAR detection and automation use cases.
• Relevant certifications, such as GSEC, GCIA, GFE, GCFA, CISA, CISSP, CISM, or CIA.