Senior Security Engineer

We are looking for a talented Senior Security Engineer experienced in Cyber/Information/Network/Cloud Security in enterprise environments, with basic knowledge of threat analysis of event data from commercial and open-source infrastructure technology platforms. Shift rotation is 2 days on, 2 days off, 12 hours, with 11 work hours and 1 hour for rest. Responsibilities Monitor on-prem and AWS infrastructure for attacks, intrusions and unusual, unauthorized or illegal activity Oversee identity and access management, including monitoring for abuse of permissions by authorized system users Create SIEM and SOAR detection and remediation scenarios, and implement them as rules Build, test and update playbooks Perform threat hunting and support threat intelligence processes Execute other security operations activities alongside security monitoring Generate reports for both technical and non-technical staff and stakeholders Leverage advanced analytic tools to determine emerging threat patterns and vulnerabilities Requirements 3+ years of experience as a Security Analyst or Security Engineer in enterprise environments Knowledge of Internet security, networking protocols and related technologies, including IDS/IPS, firewalls and content filtering Familiarity with Network Behavior Analysis tools, anti-malware and packet inspection Understanding of Windows, Linux, DB and network device monitoring and logging techniques Background in host and network security hardening, common intrusion techniques and risk management concepts Basic knowledge of malware detection, intrusion detection and prevention systems Hands-on experience with at least one SIEM solution (Splunk, QRadar, ArcSight, LogRhythm, ELK or Wazuh) Proficiency in at least one SIRP/SOAR tool (TheHive, Cortex, Phantom, XSOAR or Resilient) Capability to work with the following toolset: Splunk ES, CrowdStrike Falcon, WIZ, AWS GuardDuty, Palo Alto XSOAR, Proofpoint Excellent command of written and spoken English (B2+ level) Nice to have Experience with AWS Background in network security Familiarity with firewalls such as F5, Juniper and Check Point Exposure to Palo Alto and Cisco firewalls