Job
Description
As a Security Operations Engineer, your role will involve focusing on threat detection, incident response, data protection, and enhancing the enterprise security posture. You should have strong hands-on experience in Google SecOps Trend Vision One XDR and Varonis DLP. Your responsibilities will include: - Deploying, configuring, optimizing, and managing Google SecOps SIEM for log ingestion and monitoring - Implementing UEBA use cases for insider threat detection - Building and maintaining SOAR automation playbooks - Performing threat hunting and creating detection rules, dashboards, and workflows In addition, you will be expected to operate Trend Vision One XDR for correlated detections, manage CREM to identify cloud misconfigurations, and use CSPM to align cloud posture with compliance benchmarks. You should also be able to install, configure, and administer Varonis DLP, monitor sensitive data access and entitlement, define DLP policies, and conduct periodic access reviews. Good-to-have skills include managing Proofpoint gateways TAP TRAP for email security, managing privileged access vaulting session recording for Delinea PAM & Secret Management, and performing vulnerability scanning and compliance checks with Qualys VMDR / PC / WAS. Additionally, you should be able to perform DAST and open-source dependency scanning with Checkmarx DAST / SCA and manage application security posture with Konduktu ASPM. Handling data encryption, key lifecycle, HSM integrations, and tokenization with CipherTrust Encryption & Key Management is also part of the role. Your additional responsibilities will involve supporting incident response and forensics, developing automation, improving SOC runbooks, conducting security reviews and compliance audits, and participating in red/blue team simulations. Qualifications required for this role include: - 7-10 years in SOC/Security Operations - Hands-on experience with SIEM, XDR, and DLP - Knowledge of MITRE ATT&CK and cloud platforms - Relevant certifications are preferred In terms of soft skills, you should possess strong analytical and troubleshooting skills, excellent communication and documentation abilities, and the ability to work under pressure in SOC environments. Please note that all your information will be kept confidential according to EEO guidelines. This is a full-time position with the option for remote work. As a Security Operations Engineer, your role will involve focusing on threat detection, incident response, data protection, and enhancing the enterprise security posture. You should have strong hands-on experience in Google SecOps Trend Vision One XDR and Varonis DLP. Your responsibilities will include: - Deploying, configuring, optimizing, and managing Google SecOps SIEM for log ingestion and monitoring - Implementing UEBA use cases for insider threat detection - Building and maintaining SOAR automation playbooks - Performing threat hunting and creating detection rules, dashboards, and workflows In addition, you will be expected to operate Trend Vision One XDR for correlated detections, manage CREM to identify cloud misconfigurations, and use CSPM to align cloud posture with compliance benchmarks. You should also be able to install, configure, and administer Varonis DLP, monitor sensitive data access and entitlement, define DLP policies, and conduct periodic access reviews. Good-to-have skills include managing Proofpoint gateways TAP TRAP for email security, managing privileged access vaulting session recording for Delinea PAM & Secret Management, and performing vulnerability scanning and compliance checks with Qualys VMDR / PC / WAS. Additionally, you should be able to perform DAST and open-source dependency scanning with Checkmarx DAST / SCA and manage application security posture with Konduktu ASPM. Handling data encryption, key lifecycle, HSM integrations, and tokenization with CipherTrust Encryption & Key Management is also part of the role. Your additional responsibilities will involve supporting incident response and forensics, developing automation, improving SOC runbooks, conducting security reviews and compliance audits, and participating in red/blue team simulations. Qualifications required for this role include: - 7-10 years in SOC/Security Operations - Hands-on experience with SIEM, XDR, and DLP - Knowledge of MITRE ATT&CK and cloud platforms - Relevant certifications are preferred In terms of soft skills, you should possess strong analytical and troubleshooting skills, excellent communication and documentation abilities, and the ability to work under pressure in SOC environments. Please note that all your information will be kept confidential according to EEO guidelines. This is a full-time position with the option for remote work.
