Security Operations Engineer

Job Description

Job Description

Job Description:
We are looking for an experienced Security Operations Engineer to join an enterprise security team focused on strengthening and modernizing security capabilities across the organization. This is a hands-on engineering role for someone who can design and implement security controls while also helping improve threat detection, incident response, automation, and overall security operations.

Responsibilities

• Design, implement, and maintain security controls across cloud, endpoint, server, network, identity, database, and SaaS environments.

• Evaluate and deploy security technologies to address emerging threats and improve the organization's overall security posture.

• Identify gaps in existing security architecture and recommend and implement improvements.

• Support threat detection, incident response, investigations, containment, remediation, and recovery.

• Improve security operations through automation, scripting, and AI-assisted workflows.

• Help secure AI-enabled technologies, including data protection, access controls, API security, prompt injection risks, and monitoring.

• Partner with infrastructure, cloud, application development, risk, audit, and compliance teams.

• Develop security standards, procedures, playbooks, and technical documentation.

• Stay current on emerging attack techniques, vulnerabilities, AI-related security risks, and defensive technologies.

• Provide technical guidance and mentorship to junior team members.

Qualifications

• 6+ years of experience in cybersecurity, security engineering, or security operations within enterprise environments.

• Strong hands-on background with enterprise infrastructure, endpoint security, networking, and cloud security.

• Strong knowledge of Active Directory, Windows/Linux environments, identity security, and system hardening.

• Experience with EDR platforms, threat detection, incident response, and security configuration management.

• Experience securing AWS, Azure, GCP, or other public cloud environments.

• Experience using scripting and automation to improve security operations.

• Exposure to securing AI/ML, generative AI, SaaS, or other emerging technology environments.

• Understanding of web application security and Data Loss Prevention (DLP).

• Familiarity with frameworks such as NIST, CIS Controls, MITRE ATT&CK, ISO 27001, and OWASP.

• Strong communication skills with the ability to explain technical security risks to both technical and business stakeholders.