Security Operations Engineer

𝐑𝐨𝐥𝐞: Security Operations Engineer
𝐋𝐨𝐜𝐚𝐭𝐢𝐨𝐧: Islamabad, Pakistan
𝐎𝐫𝐠𝐚𝐧𝐢𝐳𝐚𝐭𝐢𝐨𝐧: AIO
𝐉𝐨𝐛 𝐓𝐢𝐦𝐢𝐧𝐠𝐬: 10 am – 6 pm

● 𝐊𝐞𝐲 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬:
○ Monitor, validate, and analyze security events and alerts across AWS Cloud, SaaS applications, and on-premises infrastructure.
○ Investigate CloudTrail, CloudWatch, VPC Flow Logs, and other relevant logs and telemetry to detect and respond to potential threats.
○ Design, implement, and fine-tune detection use cases and alerts within AWS and on-prem environments.
○ Triage and prioritize incoming security alerts, incidents, and privacy-related events.
○ Proactively identify vulnerabilities and enhance SIEM use cases for broader detection coverage.
○ Provide on-call support for critical incident response and urgent threat scenarios.
○ Ensure timely communication and escalation of incidents per SOC protocols.
○ Integrate and analyze threat intelligence feeds to improve detection capabilities.
○ Maintain detailed incident records in Jira, ensuring timely updates and SLA compliance.
○ Lead the development of actionable detection logic and support log parsing, rule validation, and false positive reduction.

● 𝐑𝐞𝐪𝐮𝐢𝐫𝐞𝐝 𝐐𝐮𝐚𝐥𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧𝐬:
○ Bachelor's degree in Computer Science, Information Systems, or a related field.
○ 3+ years of hands-on experience in a Security Operations Center or related cyber defense roles.
○ Solid understanding of cybersecurity frameworks and methodologies (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST).

● 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞:
○ Experience working in a 24x7 enterprise security operations environment.
Strong familiarity with AWS services and infrastructure (e.g., EC2, VPC, IAM, CloudTrail, GuardDuty).
○ Sound knowledge of cloud security architecture and virtualized environments.
○ Proficient in Linux/Unix systems, web protocols, and system hardening practices.
○ Experience in mitigation, log analysis, threat hunting, and forensic investigations.
○ Working knowledge of firewalls, IDS/IPS, vulnerability scanners, and IAM technologies.
○ Experience in the following areas: SOC, Threat Hunting, or Threat Intelligence.
○ Proficiency with SIEM tools and alert tuning (e.g., Logsign, Wazuh, ELK Stack).
○ Strong analytical, documentation, and problem-solving skills.
○ Excellent verbal and written communication abilities.

● 𝐏𝐫𝐞𝐟𝐞𝐫𝐫𝐞𝐝:
○ Experience with SOAR platforms and scripting (Python, PowerShell) for automation.
○ Familiarity with security compliance standards such as ISO 27001, PCI DSS, or SOC 2.
○ Experience using Jira, Confluence, or similar ticketing/documentation platforms.

𝐀𝐩𝐩𝐥𝐲 𝐇𝐞𝐫𝐞: https://lnkd.in/gpp3sb_y