Senior Security Operations Engineer

About the role

We are a fast‑growing digital goods company looking for our first Security Operations hire. You will shape and run threat detection and incident response across our cloud‑native platform, working closely with engineering and product security.

Key responsibilities

• Design, build and operate detection and response capabilities across cloud, identity, endpoint and SaaS environments.
• Create and maintain security data pipelines that ingest, normalize and enrich logs from sources such as CloudTrail, GuardDuty, VPC Flow Logs and Kubernetes audit logs.
• Select, deploy and tune SIEM, EDR, cloud threat detection and automation tools to achieve high signal‑to‑noise alerts.
• Write detections as code, map them to MITRE ATT&CK, measure coverage and focus on high‑risk areas.
• Own the incident response plan, act as incident commander and run blameless post‑incident reviews.

Required profile

• 5+ years of hands‑on experience in security operations, detection engineering or incident response, preferably in a startup or scale‑up.
• Proven ownership of cloud detection and response in AWS using services like CloudTrail, GuardDuty and VPC Flow Logs.
• Deep knowledge in at least two of the following: detection‑as‑code, incident response, SIEM architecture, security automation (SOAR), threat hunting.
• Engineering mindset: writes code (Python, SQL or SIEM query language) and treats detections/runbooks as software.
• Calm, clear communication under pressure and ability to translate technical findings for diverse stakeholders.

Required skills

• Python
• SQL
• AWS (CloudTrail, GuardDuty, VPC Flow Logs)
• Kubernetes audit logs
• SIEM
• EDR
• Security automation / SOAR

What we offer

• Immediate, large‑scale impact on a high‑growth business.
• Top‑of‑the‑market compensation packages.
• Opportunity to work with talent from Talabat, Careem, Etisalat and more.