Senior Security Operations Engineer - Remote

Overview

As a Senior Security Operations Engineer at Resilience, you will play a crucial role in defending the organization's endpoints and SaaS platform, focusing on automating and scaling security workflows.

In Short

• Develop dashboards, automations, and SOAR playbooks for security alerts.
• Serve as a subject matter expert for SIEM.
• Manage logging ingestion into SIEM.
• Identify tuning and automation opportunities in alert reviews.
• Refine logging and tasking workflows with partner teams.
• Document security logging ingest and automation processes.
• Participate in security architecture reviews.
• Engage in security investigations as needed.
• Integrate security tools into workflows.

Requirements

• Bachelor's degree or equivalent experience (5-10 years).
• Intermediate knowledge of Python and Bash.
• Experience with SIEM, preferably SumoLogic.
• Strong communication skills for technical and business stakeholders.
• Experience with EDR tools like Crowdstrike.
• Familiarity with AWS and public cloud environments.
• Ability to integrate systems via APIs.
• Experience in a Security Operations Center (SOC) is desirable.
• Certifications in Security Operations and Automation are a plus.

Benefits

• Work in a dynamic and skilled team environment.
• Opportunity to learn new technologies.
• Engage with a diverse range of cybersecurity solutions.
• Contribute to innovative projects in cyber risk management.