Cloud Security Operations Specialist

CEVA Logistics provides global supply chain solutions to connect people, products, and providers all around the world. Present in 170+ countries and with more than 110,000 employees spread over 1,500 sites, we are proud to be a Top 5 global 3PL.

We believe that our employees are the key to our success. We want to engage and empower our diverse, global team to co-create value with our customers through our solutions in contract logistics and air, ocean, ground, and finished vehicle transport. That is why CEVA Logistics offers a dynamic and exceptional work environment that fosters personal growth, innovation, and continuous improvement.

At CEVA Logistics, we Rise in Motion.  Your career is always on the move, growing as fast and as far as your ambition takes you. Join a global team of nearly 200 nationalities, shaping the future of global trade, moving essential goods, forging new paths, and pushing boundaries to serve an ever-changing world. The pace is fast, the challenges are real, but the rewards are greater: growth, purpose, and the chance to make a meaningful impact. This is more than a job. It’s a journey on which you rise. 

POSITION SUMMARY DESCRIPTION

A Cloud Security Operations Specialist focuses on ensuring the security and compliance of cloud environments across multiple cloud providers. This position tasked with safeguarding the integrity, confidentiality, and availability of cloud environments across multiple cloud providers, such as AWS, Azure and GCP. This specialist serves as the frontline defender against security threats, working to protect sensitive data and critical applications hosted in the cloud. By leveraging in-depth knowledge of cloud-native security tools and industry best practices, they ensure the environments remain resilient to evolving cyber threats. He will work closely with Cloud SecOps product manager and collaborate within a team of security professionals to implement robust security measures, address vulnerabilities, and maintain a secure and compliant multi-cloud environment. Their work is essential for enabling organizations to operate securely in a dynamic, multi-cloud landscape while maintaining compliance with regulatory standards and business policies.

ESSENTIAL DUTIES & RESPONSIBILITIES
Their responsibilities typically include:

1. Security Monitoring: Setting up and managing tools to detect, investigate, and respond to security incidents in AWS and GCP environments.
2. Cloud Best Practices:
   1. Reviewing and maintaining security configurations,
   2. enforcing least privilege,
   3. leveraging cloud-native security tools (e.g., AWS Security Hub, GCP Security Command Center).
3. Automation: Developing scripts or tools to automate repetitive tasks like security patching , compliance checks and automatic remediations…
4. Incident Response: Leading efforts to investigate and mitigate security breaches or threats in multi-cloud environments.
5. Access Management: Implementing secure identity and access control policies using services like AWS IAM and Google Cloud IAM.

This role requires strong knowledge of AWS and GCP security services, cloud architecture, and familiarity with DevSecOps practices.

QUALIFICATIONS
Skills needed:

• AWS Security
• GCP Security
• Azure Security (a plus)
• Terraform
• Python/Bash scripting
• DevSecOps approach
• CI/CD pipelines
• Encryption (e.g., AWS KMS)
• Automation
• Cloud compliance (e.g., GDPR, ISO 27001)

Education:

• AWS Cloud Practitioner (Mandatory)
• AWS Security Specialty (Mandatory)
• GCP certifications (Mandatory)
• AWS DevOps Engineer (a plus)
• Azure Fundamentals (a plus)

Experience:

• 6 to 8 years on managing CyberSecurity features and services on clouds platforms.

As a global organization, and as part of the CMA CGM Group, diversity is critical to our business success; only when we can reflect the cultures, languages, behaviors and local knowledge of our customers, we can succeed. By employing people with different experiences and abilities, we expand our knowledge and increase our creativity and innovation. 

Please note:  Legitimate CEVA Logistics recruitment processes include communication with candidates through recognized professional networks, such as LinkedIn or via an official company email address: firstname.lastname@cevalogistics.com. We recommend that you do not respond to unsolicited business propositions and/or offers from people with whom you are unfamiliar.