Senior Security Engineer

About the role

We are looking for a hands-on Senior Security Engineer to own and improve security operations across our corporate IT, cloud, and Kubernetes environments. The role covers security monitoring and detection, incident response, security tooling and integrations, automation, and day-to-day IT security.

What you'll do

• Own security monitoring, triage, investigation, and incident response across endpoint, identity, email, network, SaaS, GCP, and GKE environments
• Operate and improve security capabilities across SIEM, EDR, DLP, cloud security, network security, and identity security
• Integrate security tools and telemetry into the SOC to improve visibility, correlation, investigation, and response
• Build and tune detections, correlation rules, alerts, dashboards, and monitoring use cases based on attack scenarios and observed activity
• Build automated workflows for alert enrichment, triage, investigation, containment, escalation, and response using APIs and scripting

What you need

• Incident response
• SIEM
• DLP
• Cloud security
• IAM
• EDR

Good to have

• Vulnerability assessment
• CI/CD
• Terraform
• Firewalls
• Python
• GCP