Security Engineer
Core
Build and tune detection logic within SIEM using Detection-as-Code principles, automate incident response playbooks via SOAR, and act as a technical escalation point for the SOC to investigate alerts and lead remediation.
Role type
Mid-level Security Engineer (SOC/Threat Detection)
Builds
Automated threat detection and response capabilities for a global fintech payments platform
Domain
Fintech / Cybersecurity / Cloud Security
Required skills
SIEM configuration and tuning, SOAR playbook automation, cloud security (AWS), incident response and root cause analysis, IaC security remediation, EDR/WAF/Zero Trust management, scripting for automation
Preferred skills
Knowledge of security frameworks (OWASP Top 10, MITRE ATT&CK, Cyber Kill Chain)
Technologies
SIEM, SOAR, AWS, EDR, WAF, Zero Trust gateways, Notion, Slack, Jira
Responsibilities
Build and tune detection logic within the SIEM; Automate incident response playbooks via SOAR; Investigate security alerts and lead remediation efforts; Partner with Platform Engineering to secure cloud infrastructure and remediate IaC misconfigurations; Deploy and maintain the security stack including EDR, WAFs, and Zero Trust gateways
Seniority
Mid-level, hands-on IC
