SecOps Engineer

About the role

We are looking for a skilled SecOps person with 3 years of experience to join the information security team in the organization. The role includes ongoing operation and maintenance of advanced information security tools, with an emphasis on managing Check Point Firewalls, Load Balancing systems, identity management (CyberArk), Trend Micro products and application protection (Radware / Reblaze), along with the use of AI technologies to investigate cyber events, detect threats and protect AI infrastructures.

Responsibilities

Firewall management

Operational responsibility for authorization, maintenance, updates and management of rules (rules / policies) in Check Point Firewalls.

Application Protection (WAF)

Management, patching and maintenance of WAF and DDoS Protection systems with an emphasis on Radware Reblaze and CloudFlare.

Identity and Permission Management (PAM / Identity)

Operation, management and ongoing maintenance of the CyberArk (PAM) system and identity and permission management.

Operation of EDR / XDR and Email Security systems

Management and maintenance of Trend Micro (Vision One / Apex One), investigation of EDR / XDR alerts and operation of email protection systems against phishing and malware.

Work with SOC and incident response

Respond to alerts, conduct initial investigation of security events (incident response) and fix processes.

Security and investigation in the age of AI

Use of AI / Generative AI tools and automation for rapid analysis of security alerts, investigation of logs, identification of anomalies, and understanding of new security risks in work environments that integrate AI tools.

Job requirements

Required — experience and core skills

Approximately 3 years of experience in SecOps role in an organization.

Proven practical experience in managing, maintaining and troubleshooting Check Point Firewalls.

Experience working with the CyberArk (PAM) system.

Practical experience with Trend Micro products and investigating alerts in EDR/XDR systems.

Practical familiarity with WAF systems (experience with Radware / Reblaze / Cloud flare).

Familiarity with SOC, SIEM SOAR and in-depth understanding of communication protocols (TCP/IP, HTTP/S, SSL/TLS, DNS).

Advantage

Familiarity with AI applications in information security (such as automated analysis tools, AI-driven SOC tools), understanding cyber risks in the AI world (such as rapid injection, data leakage) and using AI for investigation.