Security Operations Engineer (Hybrid)

Who is Nexxen?

One platform. Endless opportunities. In an ecosystem where everyone’s trying to get closer – buyers to sellers, platforms to clients, brands to consumers – Nexxen bridges new opportunities in ways that others cannot. Data, service, and planning capabilities are our superpowers, enabling our clients to better reach and understand audiences across screens. Nexxen brings new and distinct opportunities to our partners, giving our employees the chance to expand and grow their skills.

Why join the Nexxen team?

With a global footprint, you can be part of a team that is transforming advertising through our creative, flexible and unified solutions. Employees hustle, commit and dedicate themselves to pillars that make up the Nexxen Way – the 3Cs - Customer Centric, Curious Mindset, Collaborative with No Ego.

What’s the role?

We are looking for an experienced Engineer for Security Operations to manage the cyber security of products, platforms, systems, and data. This role involves leading incident response, threat hunting, and vulnerability management, while overseeing the deployment and maintenance of advanced security technologies. You will collaborate with Development and DevOps teams to ensure secure coding practices.

What will you do?

• Advanced Security Monitoring and Incident Response: Oversee SIEM architecture for real-time event monitoring, Lead complex incident response, and conduct digital forensics.
• Threat Hunting and Intelligence: Perform proactive threat hunting and manage EDR platforms.
• Vulnerability Management and Penetration Testing.
• Security Architecture and Tool Management: Design and manage security architecture and encryption protocols.
• Automation and Scripting: Streamline repetitive security tasks and enhance response times.
• Ensure compliance with security regulations and conduct audits.
• Advanced Analytics and Reporting.
• Secure Coding.
  
  

• 5+ years of experience in cybersecurity in a distributed, Linux based system. 
• Strong expertise in advanced incident response, threat hunting, and vulnerability management in complex, heterogeneous environments.
• Hands-on experience with security automation, SIEM, IDS/IPS, and advanced threat detection platforms. 
• Relevant certifications such as ISSEP, CISM, GSOC, SSCP, or GCIH.
• Proficiency in scripting (Python, PowerShell, Bash) and knowledge of cloud security tools.
• In-depth knowledge of SIEM platforms (e.g., Splunk, QRadar) and EDR tools (e.g., CrowdStrike). 
• Expertise in network security, including firewalls, VPNs, IDS/IPS, and secure architecture design. 
• Strong understanding of cloud security principles and tools, including IAM, security groups, and encryption in AWS.