Security Operations Engineer

About the role

We are seeking an experienced Security Operations Engineer to join our team at, a leader in blockchain technology and solutions. The ideal candidate will play a vital role in defending our infrastructure, applications, and data against threats by managing our security systems, monitoring for vulnerabilities, and responding to incidents. You will be an essential part of our security operations team, ensuring our security posture remains strong and adaptive to emerging threats.

Responsibilities:

• Threat Monitoring & Detection: Continuously monitor security alerts and events across all systems using SIEM tools and other monitoring platforms. Identify, analyze, and respond to security threats in real-time.
• Incident Response: Lead and participate in incident response efforts to investigate, contain, and remediate security incidents. Conduct thorough root cause analyses and recommend long-term solutions.
• Vulnerability Management: Regularly assess and prioritize vulnerabilities, patch systems, and work with IT teams to implement secure configurations and updates.
• Security Tool Management: Configure, maintain, and optimize security tools, including firewalls, intrusion detection/prevention systems, antivirus software, and endpoint protection.
• Forensics & Analysis: Conduct forensic investigations to collect, analyze, and preserve evidence related to security incidents.
• Security Reporting & Documentation: Generate reports on security incidents, vulnerabilities, and performance of security systems. Document findings, incident responses, and security practices to maintain a knowledge base.
• Collaboration: Work closely with IT, DevOps, and engineering teams to implement security best practices, enforce security policies, and enhance the security of our applications and systems.
• Continuous Improvement: Stay up-to-date on the latest security trends, vulnerabilities, tools, and techniques. Contribute to security awareness training initiatives and recommend improvements to strengthen the organizations security posture.

Requirements:

• Educational Background: Bachelor’s degree in Computer Science, Information Security, or a related field.
• Experience: Minimum of 2-5 years of experience in security operations, incident response, or a similar role.

Technical Skills:

• Proficiency with SIEM tools (e.g., Splunk, QRadar, LogRhythm) and other security monitoring solutions.
• Strong knowledge of networking protocols, firewall management, and intrusion detection/prevention systems.
• Experience with scripting languages (e.g., Python, PowerShell) for automation of tasks.
• Familiarity with forensic tools and methodologies (e.g., EnCase, FTK).
• Solid understanding of threat intelligence and incident handling frameworks (e.g., MITRE ATT&CK, NIST).

Soft Skills: Strong problem-solving abilities, attention to detail, effective communication skills, ability to work under pressure, and a collaborative mindset.

Preferred Qualifications:

Security certifications such as CEH, GCIH, GCIA, or CISSP.

Experience with cloud security (e.g., AWS, Azure, GCP) and securing cloud environments.

Knowledge of regulatory and compliance requirements (e.g., PCI-DSS, GDPR).