Senior Security Engineer, Cyber Defence Operations
Core
Lead cybersecurity incident response, triage security alerts, run deep-dive forensics, and build automation/AI workflows to reduce response time.
Role type
Senior Security Engineer (Cyber Defence Operations)
Builds
Automated detection and response playbooks (SOAR, Python), AI-assisted triage workflows
Domain
Cybersecurity, Incident Response, Digital Forensics
Deliverable
production ML models
Required skills
Incident response leadership, SIEM/EDR operations, Cloud forensics (AWS), Network/Host forensics, Python scripting, SOAR playbook development, MITRE ATT&CK/NIST frameworks, Mentoring
Preferred skills
GCIH, GCFA, AWS security certifications
Technologies
Splunk, Sentinel, CrowdStrike, AWS, Python, SOAR platforms
Responsibilities
Lead cybersecurity incidents and post-incident reviews, Triage security alerts from network/EDR/cloud sources, Run deep-dive forensics across cloud/network/host/application layers, Tune detections and hunt for threats using log analytics, Build automation and lead AI/agentic workflows in triage and response, Participate in 24/7 on-call rotation
Seniority
Senior, hands-on IC
