Security Engineer III - Security Operations
New
J
JobgetherCloud security
Based in the United StatesFull-TimeMiddle
Salary£500 contribution toward your home office setup
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSPythonTerraform
Requirements
- Hands-on experience building, maintaining, and tuning SIEM detections; Elastic is preferred, with Splunk, Microsoft Sentinel, or comparable platforms also relevant.
- Practical experience securing AWS environments and implementing cloud-native detection and response capabilities.
- Proficiency in Python for scripting, automation, and security tooling.
- Experience with Terraform or other infrastructure-as-code technologies.
- Working knowledge of the MITRE ATT&CK framework and its use in threat detection and investigation.
- Demonstrated experience triaging, investigating, and resolving security incidents.
- Ability to document investigations, technical findings, and risk decisions clearly and in a structured manner.
- Ability to work independently, prioritize security issues, and take ownership of assigned responsibilities.
- Willingness to participate in an on-call rotation for monitoring and incident response.
- Experience with SOAR platforms or no-code security automation tools is a plus.
- Familiarity with PCI DSS, SOC 2, or ISO 27001 is a plus.
- Experience in fintech, payments, or another regulated industry is a plus.
Responsibilities
- Plan and deliver detection and response initiatives, including detection rules and automated response workflows.
- Build, tune, and maintain security detections across Elastic SIEM and AWS environments.
- Triage alerts, investigate suspicious activity, escalate incidents when needed, and drive issues toward resolution.
- Document incident investigations and findings to support follow-up actions and operational consistency.
- Develop runbooks and automation workflows using Python and tools such as Zapier or Tines.
- Make and document risk decisions, escalating issues when additional expertise or support is needed.
- Maintain audit-ready security controls and contribute evidence for SOC 2 and PCI DSS.
- Use Terraform and Python to improve infrastructure supporting security detections and operational tooling.
- Participate in the on-call rotation for security monitoring and incident response.
- Improve detection coverage, investigation processes, and response efficiency.
View Full Description & ApplyYou'll be redirected to the employer's site
