As a Security Operations Engineer you will be responsible for designing, implementing, and maintaining advanced threat detection solutions. Collaborating with the TechOps/IT team and various engineering squads, you will ensure robust security measures are applied, and capabilities are built to support comprehensive security logging and monitoring across our products and enterprise.
What you’ll do:
- Enhance threat detection & response by designing, implementing, and optimizing security tools, detection mechanisms, and secure configurations to identify and mitigate cybersecurity threats across multi cloud estate (AWS, GCP and Azure).
- Develop and optimize detection rules, signatures, and indicators of compromise (IOCs) across security platforms.
- Continuously improve security strategy & technology stack by staying up to date with industry trends, emerging threats, and evolving security best practices.
- Secure SaaS applications and infrastructure by implementing security best practices, access controls, and continuous monitoring.
- Collaborate with both non-engineering teams and IT to drive improvements by providing consultative expertise and offering advisory insights for business projects.
- Design, implement and maintain secured cloud security technologies alongside the Product Security team to achieve security and compliance objectives across multiple cloud technologies (e.g. AWS GuardDuty/Security Hub/Inspector, GCP Security Command Center).
- Enhance threat hunting, incident response, and security operations through continuous improvement in detection, analysis, and automation.
What you’ll need:
- You’re an accomplished Security Engineer or Security Operations Engineer with a track record of threat detection engineering.
- You bring hands‑on experience with SIEM solutions, EDR, intrusion detection/prevention systems, and other security tools.
- You're proficient in scripting languages (e.g. Python) for automating security processes and customizing security tools.
- You have prior experience with implementing infrastructure-as-code (Terraform, Pulumi).
- You have a strong understanding of networking protocols, cybersecurity frameworks, and attack vectors.
- You have exceptional analytical and problem‑solving skills with the ability to analyze complex security incidents and provide effective solutions.
- You have excellent communication skills with the ability to convey technical concepts to non‑technical stakeholders.
- You bring strong documentation skills for creating and maintaining threat detection rules, procedures, and incident reports.
#J-18808-Ljbffr