Security Operations Engineer

About the role

The Security Operations Engineer safeguards the organization’s cloud platforms, applications, infrastructure and data through proactive monitoring, incident response and compliance management. The role works closely with Cloud Operations, Engineering, Product and Compliance teams to continuously improve security controls.

Key responsibilities

• Monitor security events across AWS, Azure, Heroku, Salesforce and internal systems, configure SIEM tools and investigate alerts.
• Lead incident response activities, develop playbooks and coordinate cross‑functional remediation.
• Conduct vulnerability assessments, manage remediation plans and maintain a risk register.
• Manage IAM controls, enforce least‑privilege access, and oversee Joiner‑Mover‑Leaver processes.
• Implement cloud security controls, review configurations against benchmarks and support DevSecOps pipelines.
• Support compliance initiatives (ISO 27001, SOC 2, GDPR) and prepare audit evidence.
• Collaborate with engineering to embed application and data security, including encryption and secret management.
• Run security awareness programs and continuously improve security processes.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering or equivalent experience.
• 2‑4 years of experience in security operations, cloud security or related roles.
• Hands‑on experience securing AWS and Azure environments.
• Strong understanding of incident response, vulnerability management and risk assessment.

Required skills

• AWS, Azure, Salesforce, Heroku
• SIEM platforms (e.g., Microsoft Defender, Sentinel, Splunk, ELK)
• Scripting with Python, PowerShell, Bash
• IAM, MFA, SSO, RBAC concepts
• Vulnerability scanning and penetration testing coordination
• Threat hunting and log analysis