Security Operations Engineer

Saicon; Port Reading (NJ); On-site; USD 120,000 - 160,000; Full time

Job summary

Saicon is seeking an experienced Security Operations Engineer to join an enterprise security team. You will design and implement security controls across cloud, endpoints, servers, and SaaS, and improve threat detection, incident response, and automation within a hands-on role.

You will evaluate technologies, close gaps in security architecture, and mentor junior staff while partnering with cloud, infrastructure, risk, and audit teams.

Qualifications

• 6+ years of experience in cybersecurity, security engineering, or security operations within enterprise environments.
• Strong hands-on background with enterprise infrastructure, endpoint security, networking, and cloud security.
• Experience securing AWS, Azure, GCP, or other public cloud environments.
• Experience using scripting and automation to improve security operations.
• Familiarity with frameworks such as NIST, CIS Controls, MITRE ATT&CK, ISO 27001, and OWASP.
• Strong communication skills with the ability to explain technical security risks to stakeholders.

Responsibilities

• Design, implement, and maintain security controls across cloud, endpoint, server, network, identity, database, and SaaS environments.
• Evaluate and deploy security technologies to address threats and improve posture.
• Identify gaps in security architecture and implement improvements.
• Support threat detection, incident response, investigations, containment, remediation, and recovery.
• Improve security operations through automation, scripting, and AI-assisted workflows.
• Help secure AI-enabled technologies, including data protection, access controls, API security, and monitoring.
• Partner with infrastructure, cloud, development, risk, audit, and compliance teams.
• Develop security standards, procedures, playbooks, and technical documentation.
• Stay current on emerging attack techniques and defensive technologies.
• Provide technical guidance and mentorship to junior team members.

Skills

EDR platforms

Threat detection

Incident response

Automation scripting

Cloud security

Active Directory

Windows/Linux hardening

Job description

Job Description:
We are looking for an experienced Security Operations Engineer to join an enterprise security team focused on strengthening and modernizing security capabilities across the organization. This is a hands‑on engineering role for someone who can design and implement security controls while also helping improve threat detection, incident response, automation, and overall security operations.

Responsibilities

• Design, implement, and maintain security controls across cloud, endpoint, server, network, identity, database, and SaaS environments.
• Evaluate and deploy security technologies to address emerging threats and improve the organization's overall security posture.
• Identify gaps in existing security architecture and recommend and implement improvements.
• Support threat detection, incident response, investigations, containment, remediation, and recovery.
• Improve security operations through automation, scripting, and AI-assisted workflows.
• Help secure AI-enabled technologies, including data protection, access controls, API security, prompt injection risks, and monitoring.
• Partner with infrastructure, cloud, application development, risk, audit, and compliance teams.
• Develop security standards, procedures, playbooks, and technical documentation.
• Stay current on emerging attack techniques, vulnerabilities, AI-related security risks, and defensive technologies.
• Provide technical guidance and mentorship to junior team members.

Qualifications

• 6+ years of experience in cybersecurity, security engineering, or security operations within enterprise environments.
• Strong hands‑on background with enterprise infrastructure, endpoint security, networking, and cloud security.
• Strong knowledge of Active Directory, Windows/Linux environments, identity security, and system hardening.
• Experience with EDR platforms, threat detection, incident response, and security configuration management.
• Experience securing AWS, Azure, GCP, or other public cloud environments.
• Experience using scripting and automation to improve security operations.
• Exposure to securing AI/ML, generative AI, SaaS, or other emerging technology environments.
• Understanding of web application security and Data Loss Prevention (DLP).
• Familiarity with frameworks such as NIST, CIS Controls, MITRE ATT&CK, ISO 27001, and OWASP.
• Strong communication skills with the ability to explain technical security risks to both technical and business stakeholders.