SecOps Engineer I

You will

• Provide operational support for SecOps tool alerts, triaging, and maintenance.
• Work with the SecOps team and other stakeholders to test and uncover vulnerabilities.
• Assist with investigating cybersecurity incidents and investigations.
• Monitor email and the ticketing system for security-related issues and follow through until they are resolved.
• Troubleshoot problems with tools and infrastructure owned by the SecOps team (on-premise and cloud based).
• Provide support to the SecOps team with documentation for SOPs, playbooks, and how to walk throughs.
• Stay up to date with adversary tactics, techniques, and procedures (TTPs) and general security related events and news.

You should be an expert in

• System security engineering or information security engineering.
• Building and maintaining both internal and external systems.
• Operating system security for all platforms.
• Cloud security, networking technologies, and monitoring tools.

What You’ll Do

• Be responsible for all areas involving IT and operations infrastructure to ensure effective performance and data confidentiality, integrity and availability.
• Be responsible for documenting, monitoring and reporting on various security related systems and processes to ensure system and data integrity, security and availability.
• Evaluate and choose the right tools together with the various team(s) to best suit the company’s needs.
• Test, maintain and challenge the chosen solutions to comply with securities best practices.
• Work closely with the IT and System teams on hardening and configuration management on cloud and infrastructure tools to align with security and regulatory best practices.
• Perform analysis of transactional data, log files and/or other system outputs to identify malicious or anomalous activity.
• Be available to work in an on-call rotation.

You Have

• Hands-on experience with multi-cloud service environments.
• Hands-on experience with GCP, Elastic, OKTA, IDM, AD, JAMF and Windows, Linux, MacOS Operating systems.
• Experience with responding to security incidents and log analysis.
• At least 3 years experience in IT / System teams in a SAAS /Cloud company.
• Experience with establishing procedures, reports, SLA's and escalations.
• Ability to work under pressure in dynamic environments.
• Excellent interpersonal and effective leadership skills.
• Problem-solving skills and ability to work under pressure.
• Ability to communicate using English (both speaking and writing).
• Knowledge of Python / Go (big advantage).
• Valid CompTia CySA+ Certificate.

Other Requirements

• Ability to support during US hours.
• The job requires on-call duty.
• Excellent interpersonal skills.
• Strong command of the English language (written and spoken).
• Critical thinking skills.
• Problem solving skills.
• Attention to detail required.
• Communications skills necessary (both listening, and speaking).
• Ability to prioritize tasks.