Security Operations Engineer

Job Summary

Seeking a full-time Security Operations Engineer, this remote position will manage security alerts, lead incident response efforts, and enhance detection capabilities while participating in a rotating shift schedule to ensure continuous coverage.

Key responsibilities

• Monitor, triage, investigate, and respond to security alerts across various environments
• Lead end-to-end incident response, including containment, recovery, and post-incident analysis
• Develop and maintain detection logic and automation tools to improve investigation speed and response execution

Required qualifications

• Hands-on experience in security operations, incident response, or threat hunting
• Strong knowledge of attacker tactics and techniques, including familiarity with MITRE ATT&CK
• Experience with SIEM platforms and proficiency in writing detection queries
• Experience with EDR/XDR platforms and incident triage
• Scripting or automation experience using Python, PowerShell, or Bash