Senior Security Operations Engineer
Core
Lead the engineering of a security operations programme focusing on telemetry, detection engineering, incident response, and MDR provider integration for a health-tech platform.
Role type
Senior individual contributor security operations engineer
Builds
Security information and event management (SIEM) platform, detection lifecycle, incident response playbooks, and AI-assisted investigation workflows
Domain
Health-tech / Cybersecurity
Deliverable
production ML models | dashboards & analysis | client delivery
Required skills
Incident response leadership, SIEM integration and telemetry management, detection engineering, automation scripting, risk prioritization, technical documentation, cross-functional coordination, AI workflow evaluation
Preferred skills
Managed detection and response (MDR) experience, detection validation and tuning, security exercise facilitation, regulated industry experience, version-controlled security code, AI/ML in security operations
Technologies
SIEM, cloud logs, identity systems, endpoint security, network security, application security, AI/ML tools
Responsibilities
Own risk-prioritized plan for SIEM data ingestion, build telemetry health checks, develop detection lifecycle, lead technical incident response, coordinate incidents from detection to closure, run security training and exercises, provide technical evidence for compliance/legal teams, build operating model with MDR provider, measure security metrics, integrate AI into security workflows
Seniority
Senior, hands-on IC