System Engineer (Security Operations)

What You'll Do

• Monitor and maintain security systems across on‑prem and cloud platforms.
• Support implementation and operations of cybersecurity tools, including SIEM, EDR, SOAR, and CNAPP.
• Assist with cloud-focused incident response, investigation, documentation, and cross‑team collaboration.
• Work with application, network, infrastructure, and cloud teams to analyze and respond to threats.
• Communicate incident updates and findings clearly to stakeholders.
• Conduct security event investigations, vulnerability assessments, and threat analysis.
• Contribute to incident response playbooks for multi‑cloud and hybrid environments.
• Support automation initiatives using scripting and AI-driven workflows to enhance SOC efficiency.
• Stay current on emerging threats, cloud security trends, and automation technologies.
• Assist with vendor performance reviews and other ad‑hoc operational tasks.

What You Bring

• Degree in IT, Computer Science, or related field.
• 3-4 years of experience in information security cloud incident response is a strong plus.
• Security certifications (e.g., CCSP, GCIH, AWS Security Specialty) are an advantage.
• Familiarity with SIEM, EDR, CNAPP, SOAR, or related security monitoring tools.
• Solid understanding of networking, Windows/UNIX systems, Active Directory, AWS/Azure, and cloud security fundamentals.
• Awareness of cybersecurity threats, vulnerabilities, and incident response concepts.
• Experience with Python, PowerShell, or similar scripting languages for automation.