There are several companies that handle this for you, though some more effective than others. Evident.io is a big player in the field, though general complaints

There are several companies that handle this for you, though some more effective than others. Evident.io is a big player in the field, though general complaints are that they're too noisy. However, this is actually what CloudCoreo does - infrastructure security. More precisely, infrastructure security at deployment and continuous security monitoring (Evident only does the latter). Disclaimer: I work for CloudCoreo.