Security Operations Engineer

עדיין מחפשים עבודה במנועי חיפוש? הגיע הזמן להשתדרג!

במקום לעבור לבד על אלפי מודעות, Jobify מנתחת את קורות החיים שלך ומציגה לך רק משרות שבאמת מתאימות לך.

מעל 80,000 משרות • 4,000 חדשות ביום
חינם. בלי פרסומות. בלי אותיות קטנות.

B2Tech

אור יהודה

B2Tech

אור יהודה
מלאה
17,000-23,000 ₪ (הערכה מבוססת AI)
הערכה מבוססת AI ולא שכר של המעסיק

B2Tech is looking for a mid-level Security Operations Engineer to strengthen day-to-day security monitoring, identity and endpoint protection, and cloud and network security controls across our hybrid AWS and on-prem environment.

This is a hands-on operational role: you will triage alerts, harden configurations, and execute on remediation plans defined by the SecOps Team Lead, while building toward greater independent ownership of specific security domains.

Key Responsibilities

Monitoring & Incident Response

Manage and triage security alerts in Coralogix (SIEM), escalating and documenting incidents per established SOC/NOC escalation procedures
Investigate suspicious activity using Entra ID sign-in logs, SentinelOne EDR telemetry, and Cloudflare audit logs
Support incident investigations, including timeline reconstruction and evidence collection

Identity & Endpoint Security

Administer and monitor Entra ID Conditional Access policies; investigate authentication anomalies and access issues
Manage SentinelOne EDR agent health, policy configuration, and device control across the fleet
Support Microsoft Intune compliance and configuration policies

Cloud & Infrastructure Security

Manage AWS IAM permissions, cross-account access, and Secrets Manager configurations following least-privilege principles
Monitor AWS CloudTrail activity and support AWS Organizations / SCP governance
Assist in maintaining and reviewing Terraform-managed Cloudflare WAF rules and Zero Trust (WARP) access policies

Network & Application Security

Monitor and tune Cloudflare WAF rules, rate limiting, and bot/challenge configurations
Support Zero Trust network access rollout and troubleshooting for end users

Collaboration & Process

Work with SOC, NOC, and Tech Support teams on cross-functional escalations
Maintain accurate documentation of configurations, playbooks, and incident records
Participate in access reviews and support ongoing security posture improvement initiatives

Required Qualifications

3-5 years of experience in a security operations, SOC analyst, or IT security engineering role
Hands-on experience with at least one SIEM platform (e.g., Coralogix, Splunk, Microsoft Sentinel)
Working knowledge of identity and access management concepts (SSO, Conditional Access, MFA)
Experience with endpoint detection and response (EDR) tools
Familiarity with core AWS services and basic cloud security principles
Understanding of WAF, DNS, and network security fundamentals
Strong analytical and documentation skills; comfortable working independently on defined tasks

Preferred Qualifications