Orca Cloud Security Expert - SG

Project context

The Orca Cloud Security Expert is responsible for the operation, continuous improvement, and governance of the Orca Security platform across multi-cloud environments (AWS, Azure, GCP).

The role ensures end-to-end security posture management, including alert triage, remediation coordination with IT teams, and ongoing optimization of detection, processes, and coverage.

Goals and deliverables

Key Responsibilities

1. Operate Orca Security Platform (RUN)

• Manage day-to-day operations of the Orca platform, ensuring continuous monitoring of cloud environments

• Perform triage and analysis of security alerts (Critical/High/Medium)

• Conduct incident investigation and risk analysis using Orca capabilities

• Maintain dashboards, KPIs, and operational reporting for stakeholders

• Ensure service continuity, availability, and SLA adherence

________________________________________

2. Coordinate Remediation with IT Teams

• Act as the central interface between security and IT operations teams (Cloud, Infra, App teams)

• Translate Orca findings into clear remediation actions and technical recommendations

• Create and follow up remediation tickets (e.g., Helix/Jira) and track progress to closure

• Drive prioritization based on severity, business risk, and exposure

• Ensure proper ownership and accountability of remediation actions across teams

________________________________________

3. Continuous Improvement & Optimization

• Continuously optimize detection rules, alert tuning, and vulnerability classification

• Reduce false positives and improve signal-to-noise ratio (e.g., tuning “Service Vulnerabilities”)

• Enhance and maintain runbooks, processes, and automation workflows

• Contribute to shift-left initiatives (integration with DevSecOps, code scanning, IaC scanning)

• Improve coverage across cloud assets, applications, and workloads

________________________________________

4. Security Posture & Compliance Management

• Ensure continuous visibility of risks, vulnerabilities, and misconfigurations across cloud environments

• Support compliance monitoring and reporting (internal policies, standards)

• Contribute to gap analysis and policy alignment (Cloud Security Standards)

• Produce regular reports on risk posture, remediation progress, and KPIs

________________________________________

5. Stakeholder Coordination & Governance

• Collaborate with:

o Cloud teams (AWS, Azure, GCP)

o SOC / SecOps teams

o Application and DevOps teams

• Provide regular status communication on risk, remediation, and improvements

• Support steering committees and governance reviews

• Raise escalations on critical risks or remediation delays

________________________________________

Core Deliverables

• Security dashboards and reporting (KPIs, SLA, risk trends)

• Remediation tracking and follow-up reports

• Orca configuration (alerts, scans, integrations)

• Continuous improvement backlog & roadmap

• Documented processes (runbooks, remediation workflow, alert management)

Expected skills

Skills

Skill level

Cloud Security

CNAPP

CSPM

Orca

Informations de la mission :

• Début de mission : 11/09/2026
• Durée : 1 mois
• Date de publication : 15/09/2026
• Date limite de candidature : 31/10/2026