Security Operations Engineer

Everestek Technosoft Solutions; United States; Remote; USD 80,000 - 130,000; Full time

Job summary

Join a forward-thinking company as a Security Operation Engineer, where you'll play a critical role in safeguarding sensitive data and ensuring compliance with regulatory standards. This position involves collaborating across teams to implement robust security measures, conducting vulnerability assessments, and responding to security incidents. With a focus on cloud technologies and security frameworks, you'll leverage your extensive knowledge to enhance existing services and drive improvements. If you're passionate about security and thrive in a dynamic environment, this opportunity offers a chance to make a significant impact in the field.

Qualifications

• 7-10 years of experience in IT with a focus on security operations.
• Experience with security frameworks like NIST, MITRE, and ISO.

Responsibilities

• Conduct host-based vulnerability assessments and remediation.
• Monitor security alerts and support incident response efforts.
• Enhance security services for cloud environments.

Skills

Cloud Operations

Security Practices

Regulatory Compliance

Root Cause Analysis

Problem-Solving

Communication Skills

Education

College Degree or Equivalent Experience

7-10 Years in Information Technology

Tools

AWS

GitHub

Jenkins

Ansible

Rapid7

Cloud Conformity

SUMO Logic

Job description

Position: Security Operation Engineer

Summary

The Security Engineer will collaborate with teams to design fine-grained technical controls around access to sensitive datasets and ensure their compliance with regulatory requirements, while providing strong technical support to enable confident and efficient technical decision-making.

This role typically follows a standard business week, but occasional weekend or out-of-hours work may be required.

Responsibilities (Other duties may be assigned):

1. Carry out host-based vulnerability assessments.
2. Drive the remediation of identified vulnerabilities across multiple departments.
3. Monitor and respond to security alerts.
4. Support incident response efforts in case of security breaches.
5. Support and enhance existing security services for cloud environments.
6. Collaborate across teams to remove blockers and facilitate implementation.
7. Work with internal and external support teams.

Education and Experience

• College degree or equivalent work experience.
• 7-10 years in Information Technology with a comprehensive security operational background.
• Experience with security frameworks such as NIST, MITRE, CIS, ISO, and SOC2.
• Hands-on experience configuring cloud technologies.

Knowledge, Skills, and Abilities

• Extensive knowledge of cloud operations and automation.
• Deep understanding of security practices related to access control, application security, network security, and security strategy.
• Knowledge of regulatory data requirements in cloud environments, aligned with standards like HIPAA and GDPR.
• Basic understanding of containerization technology.
• Strong knowledge of privileged access management, vulnerability management, and threat intelligence.
• Ability to build effective relationships with technical and business stakeholders.
• Strong root cause analysis, problem-solving, and analytical skills.
• Excellent communication skills for incident and stakeholder management.
• Ability to document operational processes and procedures effectively.
• Adaptability to fast-paced environments and project prioritization skills.

Technical Skills

• Basic understanding of DevOps tools such as GitHub, Jenkins, Nexus, Ansible, etc.
• Basic understanding of SecOps tools like Rapid7, Cloud Conformity, SUMO Logic, etc.
• Proficiency with Amazon Web Services (AWS), including the shared responsibility model, KMS, CloudTrail, CloudWatch, CloudFormation, Lambda, and GuardDuty.
• Extensive knowledge of SIEM and SOAR tools.
• Proficiency in Linux, Node.js, YAML, and JSON.

Language Skills

• Proficient in spoken and written English.