Intermediate Security Operations Engineer

About the role

We are seeking an Intermediate Security Operations Engineer to join our growing SecOps team. The role focuses on cloud security, automation, incident response, and building secure AWS environments for internal teams and clients.

Key responsibilities

• Perform ticket triage, incident response, threat hunting, and vulnerability management.
• Investigate alerts, analyse logs, and support SIEM platform improvements.
• Implement and maintain AWS security best practices, including IAM, GuardDuty, Security Hub, Config, CloudTrail, CloudWatch, and networking controls.
• Configure secure networking (DNS, routing, VPC) and support multi‑region, multi‑tenant environments.
• Develop infrastructure‑as‑code with Terraform and automate tasks using Python or Bash.
• Assist with CI/CD pipelines, DevOps security practices, and AWS managed service troubleshooting.
• Collaborate with clients and internal stakeholders, gather requirements, and provide technical guidance.
• Create and maintain security documentation and knowledge‑base articles.

Required profile

• 2+ years of experience in SecOps, cloud security, or a related role.
• Strong understanding of AWS security concepts and cloud compliance.
• Hands‑on experience with incident response, threat hunting, and vulnerability management.

Required skills

• AWS IAM, GuardDuty, Security Hub, Config, CloudTrail, CloudWatch.
• DNS and VPC networking concepts.
• Terraform or other IaC tools.
• Python and Bash scripting.
• REST API integration and cloud automation.
• Familiarity with Tenable or Nessus vulnerability scanners.
• CI/CD and DevOps security practices.