SecOps Engineer

Description:

Join our Cloud Engineering department as a SecOps Engineer and play a critical role in safeguarding our complex, multi-cloud environment. You'll be essential in maintaining our incident response and security Service Level Agreements (SLAs), preventing team burnout, and ensuring our security posture remains robust in a dynamic, fast-paced setting.

• Champion the monitoring and initial triage of security alerts, meticulously investigating potential threats to uphold our SLA targets.
• Own and execute essential daily SecOps tasks, ensuring seamless operations and preventing critical backlogs.
• Serve as a key security liaison for Cloud Engineering peers, facilitating project momentum without overburdening senior staff.
• Configure, fine-tune, and optimize a suite of security tools, maximizing visibility and effectiveness across our cloud infrastructure.
• Dive deep into security events and alerts, identifying vulnerabilities and prioritizing remediation actions with precision.
• Develop and implement automation for routine security operations, including vulnerability scanning, incident triage, and configuration management, to enhance efficiency.

• You are a true Quality Executioner at heart, thriving on meticulous attention to detail and ensuring that every security operation is executed flawlessly to meet critical SLAs.
• You bring proven expertise in threat detection implementation and management, with hands-on experience in incident response, leveraging tools like Splunk and understanding ML models for anomaly detection.
• You possess strong proficiency with a range of security platforms including SIEM, CSPM, DSPM, EDR, vulnerability scanners, and cloud monitoring tools.
• You have a solid command of scripting languages such as Python and Bash, enabling you to automate complex security tasks.
• You have extensive, practical experience operating within complex multi-cloud environments, including AWS, Azure, and GCP.
• You are a natural collaborator and communicator, adept at working effectively with cross-functional teams to address security concerns proactively.

Nice to have

• Experience with infrastructure vulnerability management and remediation strategies.
• Familiarity with DevSecOps principles and practices.

Working with AI

In this role, you'll leverage AI and automation tools to enhance our security operations. This includes utilizing AI-powered features within SIEM and cloud monitoring platforms for threat detection, and employing automation scripts for tasks like vulnerability scanning and incident triage. Your human expertise will be crucial for interpreting AI-driven insights, making critical decisions during incident response, and continuously refining these automated processes to stay ahead of emerging threats.