Security Operations Engineer
Core
Design, implement, and operate security controls across infrastructure and systems; lead threat analysis, vulnerability remediation, and active incident response.
Role type
Senior Security Operations Engineer (hands-on IC)
Builds
Defensive security systems, security integrations, infrastructure guardrails, and security operations platforms (SIEM/SOAR)
Domain
Cybersecurity, Cloud Security, Incident Response
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Threat modeling, incident response leadership, vulnerability management, SIEM/SOAR administration, detection rule engineering, code/system review, network/host/application/cloud security concepts
Preferred skills
Threat modeling frameworks (STRIDE, MITRE ATT&CK), automated security controls, cloud-native workload security (Docker, Kubernetes), security compliance frameworks (ISO 27001, NIST, SOC2, GDPR, DORA), object-oriented programming (Python), query languages (KQL)
Technologies
SIEM/SOAR platforms (Sumo Logic, Splunk, Azure Sentinel, Datadog), Cloud providers (AWS, Azure, GCP), Containerization (Docker, Kubernetes), Query languages (SPL, KQL)
Responsibilities
Design and deploy core defensive systems and security integrations; evaluate system architectures for attack vectors and build mitigations; review code and integration architectures for security risks; track and prioritize vulnerability findings to closure; administer and configure SIEM/SOAR platforms; write and tune detection queries; conduct forensic analysis and manage incident escalation; document security findings and support compliance evidence collection.
Seniority
Senior, hands-on IC
