Security Ops Engineer

Responsibilities

• Lead incident response efforts, including investigation, containment, eradication, and recovery of security incidents.
• Monitor and analyse security events using Elastic SIEM, developing and maintaining detection rules and alerts.
• Design and implement security automation workflows to streamline operations and reduce response times.
• Manage and enhance cloud security controls across our infrastructure.
• Perform threat hunting and vulnerability assessments to proactively identify security risks.
• Develop and maintain security playbooks and documentation.
• Collaborate with other IT teams to implement security best practices.
  

Requirements

• 5+ years of experience in information security, with a focus on security operations.
• Strong incident response experience, including handling various types of security incidents.
• Proven expertise with Elastic SIEM, including custom rule development and threat hunting.
• Experience in security automation using Python or similar scripting languages.
• In-depth knowledge of cloud security principles and hands-on experience securing cloud environments (AWS).
• Understanding of common attack vectors, threat actor TTPs, and defensive strategies.
• Relevant security certifications (CISSP, GCIA, GCIH, or similar).
• Experience with SOAR platforms and building automated response workflows.
• Knowledge of compliance frameworks (SOC 2 ISO, 27001 NIST).
• Familiarity with container security and Kubernetes environments.
• Experience with threat intelligence platforms and integration.
• Required SkillsStrong analytical and problem-solving abilities.
• Excellent communication skills and the ability to explain technical concepts to non-technical stakeholders.
• Experience working in fast-paced environments with the ability to prioritise effectively.
• Strong documentation skills.
• Team player with the ability to work independently when needed.