Senior Security Operations Engineer

SUMMARY

The Senior Cyber Security Operations (SecOps) Engineer operates, maintains, and streamlines the information security team’s Incident Response Program (IRP), Security Incident and Event Management (SIEM), automation, and authentication tools. This role will focus heavily on operational and tactical level tasks, in order to provide counsel and guidance to the junior level security operations personnel in the department.

KEY RESPONSIBILITIES

· Take the lead in engineering and deploying security operations tools and processes

· Work with cross functional teams to engineer, design and deploy security operations solutions

· Proactively identify, contain, and mitigate vulnerabilities and provide metrics for reporting

· Manage and develop in incident response, threat modeling, threat intelligence, and threat hunting

· Help expand defense-in-depth security for the organization to protect critical IT assets and data from internal and external threats

· Assist in the development, execution, and enforcement of security processes, policies, and procedures

· Work with the security team to develop company-wide best practices for security

MINIMUM REQUIREMENTS

· Experience with Microsoft Azure, GCP, or AWS and associated cloud security best practices

· Experience with Elasticsearch indexes and Lucene Query Language, Agile

· Experience with User and Entity Behaviour Analytics (UEBA) tools and how to enrich threat hunting queries

· Understanding of DNS, firewalls, proxies, WAFs, SIEM, antivirus, and IDPS concepts

· Experience and knowledge in Incident Response, Threat Hunting, or Security Orchestration, Automation and Response (SOAR)

· Hands on experience with Microsoft Azure, GCP, and/or AWS

QUALIFICATION REQUIREMENTS

· Bachelor’s degree in computer science or a related field

· 8+ years of experience in information security or related field

· Certifications: CISSP, GMON, GCIA, or GCIH

· Palo Alto Networks Certified Network Security Administrator (PCNSA), Fortinet Network Security Professional, or next-gen firewall equivalent