Senior Security Operations Engineer: SIEM & Cloud

Jobgether; Bardi; Remoto; EUR 65.000 - 95.000; Tempo pieno

Vantaggi offerti da questo lavoro

Remote work

Equity options

25 days PTO

Coworking access

Team events

Equipment

Home office stipend £500

Learning budget

Private medical insurance

Other location perks

Onboarding support

Descrizione del lavoro

Jobgether is partnering with a global engineering team to hire a Security Engineer III focused on Security Operations. The role emphasizes building and refining SIEM detections, automating response workflows in Python, and applying Terraform to secure cloud infrastructure across AWS.

You will own incident investigations, contribute to SOC 2 and PCI DSS readiness, and participate in on-call rotation while maintaining clear communication and documentation.

Competenze

• Hands-on experience building, maintaining, and tuning SIEM detections.
• Experience securing AWS environments and cloud-native detection/response.
• Proficiency in Python for scripting and tooling.
• Experience with infrastructure-as-code (Terraform or similar).
• Knowledge of MITRE ATT&CK and its applications.

Mansioni

• Plan and deliver end-to-end detection and response initiatives, including automated workflows.
• Build, tune, and maintain detections across Elastic SIEM and AWS environments.
• Triages alerts, investigates incidents, escalates as needed, drives resolution.
• Document investigations clearly for follow-up actions and knowledge sharing.
• Develop runbooks and automation using Python and no-code tools to reduce manual work.
• Make risk decisions and escalate issues requiring additional expertise.
• Support compliance initiatives with SOC 2, PCI DSS readiness evidence.
• Use Terraform and Python to improve security tooling and detections.
• Participate in on-call rotation for monitoring and response.
• Continuously improve detection coverage and response efficiency.

Strumenti

Elastic

Splunk

Microsoft Sentinel

Terraform

Descrizione del lavoro

Jobgether is partnering with a global engineering team to hire a Security Engineer III focused on Security Operations. The role emphasizes building and refining SIEM detections, automating response workflows in Python, and applying Terraform to secure cloud infrastructure across AWS.

You will own incident investigations, contribute to SOC 2 and PCI DSS readiness, and participate in on-call rotation while maintaining clear communication and documentation.