Senior Security Operations (SecOps) Engineer

Role & responsibilities

Job Summary:

We are looking for a highly skilled Senior Security Operations (SecOps) Engineer to configure and manage multiple security systems, ensuring the protection of applications hosted on AWS. The ideal candidate will be responsible for system hardening, production endpoint security, vulnerability scanning, and responding to security alerts. They will collaborate with internal teams to build remediation strategies and ensure compliance with industry security standards.

Key Responsibilities:

• Identity & Access Management (IAM): Architect and implement best practices to ensure secure, compliant, and auditable access controls.
• Infrastructure Security: Work closely with engineering teams to build and maintain a secure infrastructure.
• Threat & Vulnerability Management:
• Respond to security alerts related to firewalls, IPS/IDS, SIEM, EDR, WAF, and other security systems.
• Work with teams to identify, analyze, and remediate security vulnerabilities.
• Threat Detection & Prevention:
• Design and implement multi-account, multi-region AWS threat detection and prevention strategies.
• Security Architecture & Engineering:
• Provide subject matter expertise on information security architecture to IT and business teams.
• Security Monitoring & Automation:
• Build and maintain a centralized security dashboard for security event aggregation.
• Automate security controls, data access patterns, and processes for better security insights and operational support.

Required Skills & Qualifications:

• Strong experience with security technologies like SAST, DAST, SIEM, EDR, IPS/IDS, WAF.
• Expertise in AWS security architecture, system hardening, and cloud security best practices.
• Hands-on experience with security monitoring, vulnerability scanning, and incident response.
• Ability to design and implement security automation and infrastructure security policies.
• Strong analytical and problem-solving skills to detect, prevent, and remediate security threats.

Preferred Qualifications:

• Certifications such as CISSP, CISM, AWS Security Specialty, CEH, or GIAC.
• Experience working in multi-account, multi-region AWS environments.
• Familiarity with compliance standards such as ISO 27001, NIST, SOC 2, PCI-DSS.