Note: The job is a remote job and is open to candidates in USA. Upwind is a next-generation Cloud Security Platform that uses runtime context to identify and prioritize critical risks and provide efficient cloud security management. The Security Engineer will join the MDR team as the founding U.S. member of the Security organization, focusing on proactive customer environment reviews, advanced security guidance, incident investigations, and U.S.-hours coverage. The role also involves collaborating across security and engineering teams and contributing to AI-driven detection models.
Responsibilities
- Assist in fine-tuning Upwind's detection and response mechanisms
- Support proactive reviews of customer environments to identify risks, exposed attack surfaces, and recommend improvements
- Lead and conduct in-depth security investigations — including supply chain, API, malware, and runtime attack scenarios — documenting outcomes and developing playbooks to enhance future detection and response
- Collaborate with Security Analysts, Research, and Backend teams to enhance detection quality
- Own the handling of complex or critical incidents escalated from Tier 1/2, including live, high-pressure engagements with customers
- Participate in recurring customer meetings, helping translate security findings into clear, actionable recommendations — and maintain composure when conversations get tense
- Stay up to date with emerging threats, attack techniques, attack surfaces, and best practices in cloud security
- Contribute to the development and training of AI-driven detection models, leveraging machine learning to improve investigation accuracy and response efficiency
Skills
- Visa sponsorship is not available
- This role includes participating in a shared on-call rotation. While escalations are infrequent, team members are expected to be available for nights, weekends, or holidays during their rotation week
- Solid, hands-on experience in cybersecurity, ideally from a leading cloud or cloud security company, with real-world exposure to cloud environments
- Strong working knowledge of detection engineering, incident response, and threat analysis, with the ability to explain attack techniques (supply chain, API, malware, runtime) in depth
- Hands-on experience with at least one major cloud platform (AWS, GCP, or Azure) and container technologies (Docker/Kubernetes)
- Comfortable and hands-on with Linux; Windows knowledge is a plus
- Familiarity with networking fundamentals and scripting (Python/Bash)
- Strong communication and presentation skills, with proven ability to engage directly with customers — including staying composed under pressure or pushback
- Self-directed and comfortable operating independently in a fast-paced, high-ownership startup environment
- Curiosity, problem-solving mindset, and a genuine personal interest in security beyond the day job
- B.Sc. in Computer Science / Information Security — an advantage
Benefits
- Remote work arrangement
- A clear path toward technical or team leadership as the U.S. presence scales
Company Overview