Orca Cloud Security Expert

Job Description Orca Cloud Security Expert (CSPM / CNAPP)

Role Summary

TheOrca Cloud Security Expertis responsible for theoperation continuous improvement and governanceof the Orca Security platform across multi-cloud environments (AWS Azure GCP).

The role ensuresend-to-end security posture management includingalert triage remediation coordination with IT teams and ongoing optimization of detection processes and coverage.

Key Responsibilities

1. Operate Orca Security Platform (RUN)

• Manage day-to-day operations of the Orca platform ensuringcontinuous monitoring of cloud environments

• Performtriage and analysis of security alerts (Critical/High/Medium)

• Conductincident investigation and risk analysisusing Orca capabilities

• Maintain dashboards KPIs and operational reporting for stakeholders

• Ensureservice continuity availability and SLA adherence

2. Coordinate Remediation with IT Teams

• Act as thecentral interface between security and IT operations teams(Cloud Infra App teams)

• Translate Orca findings intoclear remediation actions and technical recommendations

• Create and follow upremediation tickets (e.g. Helix/Jira)and track progress to closure

• Driveprioritization based on severity business risk and exposure

• Ensure properownership and accountability of remediation actions across teams

3. Continuous Improvement & Optimization

• Continuouslyoptimize detection rules alert tuning and vulnerability classification

• Reduce false positives and improvesignal-to-noise ratio(e.g. tuning Service Vulnerabilities)

• Enhance and maintainrunbooks processes and automation workflows

• Contribute toshift-left initiatives(integration with DevSecOps code scanning IaC scanning)

• Improvecoverage across cloud assets applications and workloads

4. Security Posture & Compliance Management

• Ensurecontinuous visibility of risks vulnerabilities and misconfigurationsacross cloud environments

• Supportcompliance monitoring and reporting(internal policies standards)

• Contribute togap analysis and policy alignment(Cloud Security Standards)

• Produceregular reports on risk posture remediation progress and KPIs

5. Stakeholder Coordination & Governance

• Collaborate with:

• Cloud teams (AWS Azure GCP)

• SOC / SecOps teams

• Application and DevOps teams

• Provideregular status communicationon risk remediation and improvements

• Supportsteering committees and governance reviews

• Raise escalations oncritical risks or remediation delays

Core Deliverables

• Security dashboards and reporting (KPIs SLA risk trends)

• Remediation tracking and follow-up reports

• Orca configuration (alerts scans integrations)

• Continuous improvement backlog & roadmap

• Documented processes (runbooks remediation workflow alert management)

Required Skills & Experience

Technical Skills

• Strong experience with:

• Cloud Security (AWS / Azure / GCP)

• CSPM / CNAPP platforms (Orca preferred)

• Knowledge of:

• Vulnerability management & remediation workflows

• Cloud misconfigurations and security best practices

• DevSecOps / Shift-left security (IaC scanning SAST secrets detection)

• Familiarity with:

• ITSM tools (ServiceNow / Helix / Jira)

• SIEM / SOC integration

Soft Skills

• Strongcoordination and stakeholder managementcapabilities

• Ability totranslate technical risks into actionable remediation

• Structuredprocess-oriented mindset(run improve industrialize)

• Strong communication skills (technical and executive level)

KPIs / Success Measures

• Reduction ofcritical/high vulnerabilities backlog

• Mean time toremediation (MTTR)

• % ofOrca alerts triaged and resolved within SLA

• Coverage of cloud assets monitored by Orca

• Reduction offalse positives / alert noise

Positioning (Typical Organization)

• Reports to:Cloud Security / Cybersecurity Lead

• Works closely with:

• SOC / SecOps

• Cloud Engineering

• Application teams

Value Proposition of the Role

• Ensuresend-to-end control of cloud security posture

• Drivesoperational excellence in vulnerability management

• Enablesscalable automated and standardized security operations

• Acts as abridge between security and IT operations