Senior Security Operations Engineer
D
Digital ZoneDigital goods
United Arab Emirates. Iraq. Romania. PolandFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- Typically 5+ years in security operations, detection engineering or incident response
- Required Skills
- AWSPython
Requirements
- Typically 5+ years in security operations, detection engineering or incident response.
- Hands-on experience building security capabilities.
- Experience building detections and investigating incidents in AWS.
- Experience with sources such as CloudTrail, GuardDuty, VPC Flow Logs and Kubernetes audit logs.
- Depth leading at least one security operations domain, ideally several: detection engineering, incident response, SIEM architecture, security automation, threat hunting or threat intelligence.
- Ability to write code in Python, SQL or a SIEM query language.
- Experience treating detections and runbooks like software and automating repetitive work.
- Ability to run incidents and communicate technical findings, impact and next steps to technical and non-technical stakeholders.
- Startup or scale-up background is a strong plus.
- Experience with SOC 2, ISO 27001 or PCI audit controls is a nice to have.
- Experience managing an MDR or MSSP partner is a nice to have.
- Familiarity with breach notification obligations, such as UAE PDPL or customer contractual SLAs, is a nice to have.
- Experience hiring or mentoring security analysts or engineers is a nice to have.
Responsibilities
- Design and operate security operations across cloud, identity, endpoint and SaaS.
- Build pipelines that ingest, normalize and enrich security logs, and monitor pipeline health.
- Select, deploy, configure and tune SIEM, EDR, cloud threat detection and automation tooling.
- Write detections as code, map them to MITRE ATT&CK, and measure and test coverage.
- Own the incident response plan and playbooks, and act as incident commander for security events.
- Coordinate incident containment and recovery across engineering, legal and leadership.
- Run blameless post-incident reviews.
View Full Description & ApplyYou'll be redirected to the employer's site
