Senior Security Operations Engineer (Remote)

Placements24; East London; Híbrido; ZAR 900 000 - 1 500 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work

Health insurance

PTO

Professional development

Home office stipend

Resumo da oferta

Placements24 is seeking a Senior Security Operations Engineer to join a fully remote cybersecurity team. You will design, implement, and manage security tools and infrastructure, enhancing the SIEM system, automating responses, and leading threat detection and mitigation efforts.

The role requires expertise in incident response, threat hunting, and automation, with a remote-friendly setup and collaboration with a global security team to strengthen defenses.

Qualificações

• Bachelor's degree or equivalent practical experience.
• Minimum of 6 years in security operations or related role.
• Proven expertise in SIEM platforms and EDR solutions.
• Strong scripting skills (Python, PowerShell) for automation.

Responsabilidades

• Design, deploy, and maintain security infrastructure including SIEM, IDS/IPS, EDR.
• Develop automated security workflows and SOAR capabilities.
• Lead proactive threat hunting to uncover hidden threats.
• Tune security tools to reduce false positives and improve detection accuracy.
• Develop and maintain SIEM use cases, correlation rules, and dashboards.
• Provide Tier 3 support for security incidents and coordinate with IR teams.
• Evaluate and recommend new security technologies and solutions.
• Mentor junior security operations engineers and document Playbooks.

Conhecimentos

Security operations

SIEM

EDR

Automation scripting

Cloud security

Incident response

Threat hunting

Communication

Forensics

Formação académica

Bachelor's degree in CS/Cybersecurity

Ferramentas

Splunk

QRadar

Microsoft Sentinel

Python

PowerShell

AWS

Azure

GCP

Descrição da oferta de emprego

About the Role

Our client is seeking an experienced Senior Security Operations Engineer to join their entirely remote cybersecurity team. This critical role involves the design, implementation, and management of security tools and infrastructure that protect the organization's digital assets. You will be instrumental in enhancing our Security Information and Event Management (SIEM) system, developing automated response capabilities, and leading efforts to detect and mitigate sophisticated threats. The ideal candidate possesses a deep understanding of security operations, incident response, threat hunting, and the automation of security processes. This is a fully remote position, offering the flexibility to work from anywhere. You will collaborate with a global team of security professionals, contributing to a robust and resilient security posture. This is an excellent opportunity to leverage your expertise in security engineering and automation to make a significant impact on a leading company's cybersecurity defenses in a remote-first setting.

Key Responsibilities

• Design, deploy, and maintain security infrastructure, including SIEM, IDS/IPS, EDR, and threat intelligence platforms.
• Develop and implement automated security workflows and response capabilities (SOAR).
• Lead proactive threat hunting initiatives to uncover hidden threats within the environment.
• Tune security tools to reduce false positives and improve detection accuracy.
• Develop and maintain SIEM use cases, correlation rules, and dashboards.
• Provide Tier 3 support for security incidents and work closely with incident response teams.
• Evaluate and recommend new security technologies and solutions.
• Mentor junior security operations engineers and contribute to team development.
• Create and maintain comprehensive documentation for security tools, processes, and playbooks.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Minimum of 6 years of experience in security operations, security engineering, or a related cybersecurity role.
• Proven expertise in SIEM platforms (e.g., Splunk, QRadar, Microsoft Sentinel) and EDR solutions.
• Strong experience with scripting languages (e.g., Python, PowerShell) for automation.
• Experience with cloud security environments (AWS, Azure, GCP) and related security tools.
• Solid understanding of incident response, threat hunting, and forensics principles.
• Excellent analytical, problem-solving, and communication skills.
• Relevant security certifications such as GSEC, GCIH, GCIA, CISSP, or cloud security certifications are highly desirable.
• Ability to thrive in a fully remote work environment and collaborate effectively with distributed teams.

Benefits

• Highly competitive salary package up to R per annum.
• Fully remote work flexibility with flexible working hours.
• Comprehensive health, dental, and vision insurance coverage.
• Generous paid time off and holidays.
• Professional development budget for training, conferences, and certifications.
• Opportunity to work with cutting-edge security technologies and impact global security efforts.
• Home office setup stipend.