Security Operations Engineer: Cloud & Incident Response

Sungrow USA Corporation; Costa Mesa, Houston (CA, TX); Hybrid; USD 100,000 - 120,000; Full time

Job summary

Sungrow Americas is seeking a Security Operations Engineer to own security tooling and drive incident response across IT and cloud environments. The role blends hands-on engineering with lifecycle incident response to strengthen defense-in-depth capabilities.

Responsibilities include deploying and tuning SIEM/EDR/XDR, IAM, and vulnerability management, coordinating with MSSP, and improving security configurations and playbooks in a hybrid enterprise setting.

Qualifications

• 2-4 years of hands-on experience in cybersecurity operations.
• Hands-on experience supporting security tools (SIEM, EDR/XDR, IAM, vulnerability management).
• Cloud experience (AWS and/or Azure).
• Proven ability to investigate and respond to security incidents.
• Understanding of security operations workflows, detection, and response processes.

Responsibilities

• Lead end-to-end incident response, including triage and containment.
• Own and deploy security tooling and configurations (SIEM, EDR/XDR, IAM).
• Coordinate with MSSP for monitoring and escalation.
• Perform vulnerability management and remediation tracking.
• Collaborate with IT/engineering to enforce secure configurations.

Skills

Security operations

Incident response

Cloud security

Cross-functional collaboration

Communication

Tools

SIEM

EDR/XDR

IAM

Vulnerability management

AWS

Azure

Job description

Sungrow Americas is seeking a Security Operations Engineer to own security tooling and drive incident response across IT and cloud environments. The role blends hands-on engineering with lifecycle incident response to strengthen defense-in-depth capabilities.

Responsibilities include deploying and tuning SIEM/EDR/XDR, IAM, and vulnerability management, coordinating with MSSP, and improving security configurations and playbooks in a hybrid enterprise setting.