Lead SecOps Engineer

Responsibilities

• Monitor security alerts and logs across endpoints, network, cloud, and applications (SIEM/SOAR platforms)
• Investigate and respond to security incidents, performing triage, containment, and root-cause analysis
• Develop and tune detection rules, correlation logic, and alerting to reduce false positives and close coverage gaps
• Build and maintain automation/playbooks for incident response (SOAR)
• Conduct vulnerability management, including scanning, prioritization, and coordinating remediation with engineering teams
• Perform threat hunting to proactively identify malicious activity
• Support security tooling deployment and integration (EDR, SIEM, cloud security posture tools, IAM)
• Participate in on-call rotation for security incidents
• Contribute to post-incident reviews and documentation (runbooks, RCAs)
• Collaborate with IT, DevOps, and engineering to harden infrastructure and enforce security best practices

Languages