Senior Cloud Security Operations Analyst

Meet Our Team:

Pega is a leader in customer engagement and digital process automation, delivering a commercial SaaS version of our industry-leading platform to clients worldwide. The Pega Cloud Security Operations Center (CSOC) protects our commercial cloud assets and offerings by deterring, detecting, denying, delaying, and defending against threats. Our team delivers detection, monitoring, and incident response services for Pega Cloud, and we're growing our presence in Sydney to support our global cloud security mission.

Picture Yourself at Pega:

Play a critical role in ensuring the confidentiality, integrity, and availability of Pega's commercial cloud infrastructure. You'll be central to continuous monitoring, protection of global cloud security operations, and incident response — collaborating with threat detection engineers, vulnerability analysts, and security engineers to identify risks and strengthen our cloud security frameworks. Pega is actively embracing emerging AI capabilities, and you'll be expected to use AI-enabled tools to boost efficiency and decision-making — always applying critical thinking to validate AI-generated outputs before they're put into production.

What You'll Do at Pega:

• Perform security monitoring of Pega Cloud commercial environments using multiple tools and dashboards
• Investigate security events to identify Indicators of Compromise (IOCs)
• Contribute to incident response activities: identification, containment, eradication, and recovery
• Develop Standard Operating Procedures (SOPs), policies, and playbooks for CSOC detection and analysis
• Enhance security incident response plans and recommend remediation measures
• Perform threat hunts for adversarial activities within Pega Cloud
• Assist in developing high-confidence Splunk notables and situational awareness dashboards/reports

Who You Are:

• You bring insatiable curiosity and tenacity for defending against bad actors
• You've spent time in the "security trenches" and understand how efficient SOC operations run
• You bring a wealth of cloud security experience and are ready to lead technical analysis and incident response
• You have a track record of success in the information security industry
• AI-First Mindset (essential): You can use and reason with AI tools, validate their outputs, apply sound judgment, and demonstrate real-time thinking through artifacts like Pega GenAI Blueprints
• Growth Mindset (essential): You show learning agility, adaptability, openness to feedback, a willingness to iterate, and a bias toward action over perfection

Your List of Accolades Include

• SANS, Offensive Security, or other top-tier technical security certifications focused on analysis, detection, and/or incident response
• Industry recognition for identifying security gaps to secure applications or products

What You've Accomplished:

• Must-Have: Australian citizenship is required for this role
• 4+ years of industry-relevant experience with knowledge of cloud architecture, infrastructure, and resources
• 2+ years in operational SIEM roles (analysis, investigations, incident response); Google Chronicle SIEM experience is a plus
• 2+ years of operational cloud security experience (AWS and/or GCP preferred), including analysis of logs such as CloudTrail, Cloud Audit, GuardDuty, VPCFlow, and WAF
• 2+ years of operational experience with EDR/XDR platforms
• Operational experience with Linux, Windows, AWS, GCP, and Kubernetes (EKS/GKE)
• Solid knowledge of the MITRE ATT&CK framework, particularly the cloud matrix
• Familiarity with OWASP Top 10 vulnerabilities
• Foundational understanding of OS (Linux/Windows) and network architecture
• Scripting experience (Python, Linux shell/bash, PowerShell) is a plus
• Excellent verbal and written communication, with the ability to remain poised under pressure
• Demonstrated ability to foster a healthy, productive team culture
• Bachelor's degree in Cybersecurity, Computer Science, Data Science, or a related field

Pega Offers You:

• Gartner Analyst-acclaimed technology leadership
• Continuous learning and development opportunities
• An innovative, inclusive, agile, and flexible work environment
• Competitive benefits package (salary, bonus incentive, and employee equity)
• The opportunity to work at the forefront of AI-enabled innovation

#LI-DM2