IT - Security Operations Specialist
Core
Hands-on Security Operations Engineer protecting corporate environment, cloud workloads, and customer trust via detection, incident response, vulnerability management, and compliance support.
Role type
Senior IC security operations engineer
Builds
Detection rules, incident response playbooks, automated security workflows, compliance evidence
Domain
Cloud security (AWS), SOC operations, compliance (SOC 2, ISO 27001)
Required skills
Cloud security (AWS), SIEM/XDR/EDR, incident response, vulnerability management, scripting (Python/PowerShell/Bash), networking, identity security, MITRE ATT&CK
Preferred skills
SOAR, Infrastructure as Code (Terraform/CloudFormation), detection-as-code, MSSP or cloud consulting background, GRC tools
Technologies
AWS, SIEM, XDR, EDR, SOAR, Python, PowerShell, Bash, Terraform, CloudFormation, GRC platforms
Responsibilities
Monitor and respond to security alerts across cloud, endpoint, identity, and SaaS environments; Improve incident response processes including playbooks, triage, containment, and post-incident reviews; Build and tune detections and correlation rules in SIEM/XDR platforms; Run vulnerability management scans, prioritize issues, and track fixes; Automate security workflows with scripting and SOAR tools; Run phishing simulations and security awareness work; Support audits and compliance work (SOC 2, ISO 27001) by gathering evidence and monitoring controls
Seniority
Senior, hands-on IC
