Senior Security Operations Engineer

What you'll do

• Lead day-to-day security operations, including monitoring, detection, investigation, and response to security incidents.
• Understand modern cloud infrastructure stacks and inject security controls (Terraform, Kubernetes, CI/CD, ArgoCD, Github).
• Develop, refine, and maintain SIEM rules, alerts, dashboards, and playbooks for proactive threat detection.
• Drive incident response efforts, including triage, containment, eradication, recovery, and post-incident reporting.
• Automate repetitive SecOps processes (e.g., enrichment, remediation, alert triage) to improve efficiency and reduce noise.
• Conduct threat hunting activities to identify hidden threats and vulnerabilities.
• Collaborate with DevOps and engineering teams to embed security best practices into systems and workflows.
• Perform log analysis and security monitoring across cloud, endpoint, and network environments.
• Lead security assessments and participate in vulnerability management and remediation programs.
• Partner with compliance and risk management teams to support audits and regulatory requirements.

What you'll bring

• 5+ years of hands-on experience in Security Operations.
• Strong knowledge of SIEM platforms.
• Expertise in threat detection, malware analysis, and forensic investigation.
• Proficiency with scripting and automation tools (Python, Bash, etc.).
• Solid understanding of network protocols, firewalls, IDS/IPS, EDR, and cloud security controls.
• Experience with cloud platforms (AWS and GCP) and their native security services.
• Familiarity with MITRE ATT&CK, NIST, ISO, and other security frameworks.
• Excellent communication and leadership skills, with experience guiding teams or projects.
• Security certifications a plus.