Security Operations Engineer

What you’ll do

• Monitor security events and alerts to detect, triage, and respond to security incidents in real-time.
• Develop, implement, and optimize security monitoring tools (SIEM, IDS/IPS, EDR, Cloud Security Platforms) to improve detection and alerting capabilities.
• Conduct thorough security investigations and provide detailed reports on security incidents, including root cause analysis and incident post-mortems.
• Manage incident response processes including containment, eradication, recovery, and follow-up actions.
• Collaborate with engineering and IT teams to design and implement security controls to reduce attack surfaces and mitigate security risks.
• Continuously improve playbooks and standard operating procedures (SOPs) for incident detection, analysis, and response.
• Maintain and enhance security automation and orchestration to streamline operational processes and reduce manual workloads.
• Partner with internal teams to assess and improve the security posture of IT infrastructure and cloud environments.
• Provide support for threat-hunting activities, including identifying gaps in current detection mechanisms and building new detection logic.
• Track and remediate vulnerabilities across systems and platforms using vulnerability management tools.
• Assist in compliance efforts such as SOC 2 and ISO 27001 by ensuring security controls are in place and operational.
• Stay current on emerging threats, attack vectors, and the evolving threat landscape to continuously improve operational defenses.

What you’ll bring:

• Bachelor’s Degree in Cybersecurity, Information Technology, Computer Science, or related discipline or equivalent experience.
• Minimum of 3 years of experience in Security Operations, Incident Response, or a related field.
• Hands-on experience with security tools such as SIEM (e.g., Splunk, ELK, Datadog), IDS/IPS, EDR, and network security monitoring systems.
• Hands-on cloud security experience with tools such as CSPM/CIEM (e.g., Wiz, Prizma, Aqua) and cloud-native threat detection (GuardDuty, Wiz, Azure ATP)
• Strong understanding of network protocols, operating systems (Linux, Mac, Windows), cloud environments (AWS, Azure, GCP), and modern software architecture (Containers, microservices, event-driven architecture).
• Experience in detection engineering, with pattern matching tools such as YARA and Rego.
• Familiarity with security frameworks and standards (NIST, MITRE ATT&CK, SOC 2, ISO 27001).
• Experience conducting root cause analysis and creating comprehensive incident reports.
• Proficient in scripting and automation (e.g., Python, PowerShell, Bash) to improve operational efficiency.
• Ability to identify, analyze, and remediate security vulnerabilities in dynamic environments.
• Effective problem-solving skills with a proven ability to handle complex and fast-moving incidents.
• Ability to work closely with an MSSP or MDR service and be available for on-call support when necessary.
• Excellent communication skills, with the ability to explain technical details to non-technical stakeholders.

Salary & Benefits

• Competitive salary based on experience and qualification.
• Gratuity benefit.
• Hybrid Office. (3 days remote,2 days physical)
• Medical Insurance.
• FN LLC Performance Reward.
• Festival Bonus.
• Gym Membership.
• Career Development Budget.
• LinkedIn Learning.
• Lunch - Fully Subsidized.
• Sound work-life balance - Regular working hours: 8 hours/day, 5 days a week.
• Friendly work environment.
• Flexible leave/vacation policy.
• A great learning opportunity.
• The opportunity to work with cross-cultural teams with the US.
• Annual performance evaluation and increment.
• Employee Transportation: Drop off available.

Office Time

• 1pm - 10 pm.

Salary Range

• 70k-100k