MTS-2 Security Operations Engineer
Core
Monitor, investigate, and respond to cybersecurity events within eBay's CSIRT Operations team to protect global e-commerce information assets.
Role type
Mid-level Security Operations Engineer (SOC/CSIRT)
Builds
Continuous security monitoring, incident response workflows, and threat detection capabilities for eBay's global platform.
Domain
Cybersecurity / E-commerce
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security event monitoring, alert triage, incident response, containment techniques, forensic preservation, threat detection, OSINT analysis, Python scripting, network analysis (Wireshark/tcpdump), SIEM/EDR operations
Preferred skills
MITRE ATT&CK framework knowledge, advanced threat hunting, automation of security operations
Technologies
SIEM platforms, EDR tools, Wireshark, tcpdump, Python
Responsibilities
Monitor global security events and alerts 24x7; perform initial investigation and triage of security incidents; execute containment actions and assist with forensic preservation; analyze alerts to identify IOCs and tune detection rules; collect and disseminate OSINT; escalate complex incidents to senior engineers; participate in rotating shift schedules including weekends and holidays
Seniority
Mid-level, hands-on IC