Senior Security Operations Engineer

As a Senior Security Operations Engineer, you will play a key role in protecting the organisations IT infrastructure and data. You will focus on implementing technical solutions, identifying security vulnerabilities, responding to incidents, and ensuring the security of on-premise and cloud systems. Your responsibilities also include developing security policies, performing security audits, and contributing to the overall security strategy. You will collaborate with teams to identify and mitigate risks, integrating security into the organisation's operations.

Duties

• Monitor security alerts and events to identify threats and vulnerabilities
• Implement and manage security tools to detect and prevent threats (e.g. SIEM, IDS/IPS)
• Analyse security incidents and develop effective response strategies
• Lead incident response activities, including containment, eradication, and recovery
• Conduct regular security assessments to identify system and network weaknesses
• Develop and maintain security documentation, including incident response plans and security policies
• Collaborate with cross-functional teams to enhance security posture
• Provide guidance to IT teams on security-related matters
• Evaluate and improve security tools and technologies
• Manage security technologies for Microsoft products (on-premise and cloud)
• Stay updated on cybersecurity trends, industry standards, and regulations
• Assist in the development and testing of disaster recovery and business continuity plans
• Contribute to risk assessments, business impact analysis, and vulnerability management

Qualifications and Experience:

• Bachelors degree in Computer Science, Information Security, or related field
• Minimum of 5 years in Information Security roles, focusing on security engineering, incident response, and vulnerability management
• Certifications such as CISSP, CEH, and ISO27001 Lead Implementer are preferred
• Cloud security expertise in AWS and Azure is a strong advantage

Skills:

• Strong understanding of cybersecurity principles and best practices
• Hands-on experience securing AWS and Azure environments
• Experience with security tools such as SIEM, IDS/IPS, and EDR solutions
• Familiarity with industry standards and regulations (e.g. NIST, ISO27001)
• Proficiency in leading incident response activities
• Experience conducting security assessments and vulnerability analysis
• Strong knowledge of security standards, frameworks, and regulatory requirements
• Experience in penetration testing and system hardening
• Excellent problem-solving, analytical, and communication skills