Senior IT Security Operations Engineer

About the role

The Senior IT Security Operations Engineer will protect the organization’s IT environment by monitoring, detecting, investigating, and responding to cyber threats. You will work in a 24×7 Security Operations Center (SOC) to ensure the confidentiality, integrity, and availability of critical systems.

Key responsibilities

• Monitor and manage security platforms such as SIEM, EDR/XDR, IDS/IPS, DLP, and firewalls.
• Investigate alerts, conduct threat hunting, and support incident response activities.
• Perform vulnerability assessments, coordinate remediation with IT teams, and track remediation progress.
• Develop, tune, and automate detection rules, playbooks, and security tooling.
• Produce incident reports, security metrics, and assist with compliance audits.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 5–8 years of experience in a SOC or IT security operations environment.
• Relevant security certifications (e.g., Security+, CEH, GIAC, OSCP) are a plus.
• Strong analytical, troubleshooting, and communication skills.

Required skills

• Hands‑on experience with SIEM tools (Splunk, QRadar, Microsoft Sentinel).
• Proficiency with firewalls, EDR/XDR solutions, and endpoint security.
• Experience in incident response, vulnerability management, and log analysis.
• Knowledge of Windows, Linux, and cloud platforms (AWS, Azure, GCP).
• Understanding of malware, phishing, ransomware, threat intelligence, and the MITRE ATT&CK framework.
• Scripting abilities in Python, PowerShell, or Bash.