Security Operations Engineer

Job Summary

To support the ongoing transformation of the Security Operations & Incident Response program, the contracted Engineer - Security Operations and Incident Response will drive operational delivery excellence and continuous advancement in cybersecurity threat identification and eradication while working remotely.

Key responsibilities

• Provide expert-level support for deep dive investigations, including digital forensics and malware analysis
• Author and refine incident response playbooks and operational guidelines to adapt to evolving threats
• Design and implement complex detection rules and automated remediation workflows to identify adversarial behavior

Required qualifications

• Bachelor's degree and 5+ years of relevant experience in incident response and SOC tooling
• In-depth knowledge of SIEM/SOAR platforms and incident response processes in hybrid cloud environments
• Experience leading incident response as incident commander and performing root cause analysis
• Familiarity with scripting languages such as Python, PowerShell, and Bash
• Understanding of regulatory compliance frameworks such as MITRE ATT&CK and NIST