SecOps Expert

Role overview A global Security & Information team is hiring a SecOps specialist to protect production infrastructure supporting a digital-asset platform. The role combines hands-on incident response, detection engineering, and security tool ownership in a fast-paced environment handling multiple projects at once. Some weekend and night shifts are required as part of on-call coverage.

Responsibilities - Investigate alerts, perform triage, deep-dive analysis, and define actionable follow-ups and remediation plans. - Conduct host-based, artifact, and malware analysis in support of security investigations and incident response. - Coordinate investigation and response activities with business stakeholders and cross-functional groups. - Develop incident analysis and findings reports for management, including gap identification and improvement recommendations. - Author and tune detection logic, sensors, and SIEM queries and dashboards to surface advanced adversary techniques. - Partner with security-solution owners to assess whether existing controls can detect or mitigate relevant TTPs.

Requirements - 3+ years working in an Incident Response or Security Operations Center (in-house or outsourced), creating and managing security incidents and incident reports. - Demonstrated experience handling low-to-high-risk cybersecurity events, alerts, monitoring, and stakeholder-driven remediation. - Ability to develop runbooks for the most frequent or critical incident types. - 3+ years hands-on with security tools such as SIEM, threat intelligence, intrusion detection, malware detection, DLP, and IAM. - Solid understanding of system and security controls on at least two operating systems (Windows, Linux/Unix; macOS a plus), including host-based forensics and OS-artifact analysis. - Strong problem-solving mindset, growth orientation, and collaborative communication skills.

Nice to have - Bachelor's degree in Computer Science, Information Technology, or a related field. - Familiarity with cloud services, Kubernetes, cloud-environment architecture, and major providers (AWS, GCP, Azure).

Benefits and work setup - Based in New York (HQ or approved NY remote), with required shifts covering some weekends and nights.