Remote job
Senior Security Engineer - SecOps
Job details
About this role
Role overview Monitor and respond to security incidents affecting products and services, helping contain attacks and protect users. As a senior member of an incident response team, you will guide incidents through investigation and recovery while improving the alerts, playbooks, and operating practices that support a round-the-clock response capability.
Responsibilities - Detect, investigate, and respond to security incidents across a global environment, and serve as incident commander when needed. - Maintain security alerts, automated actions, response playbooks, and escalation workflows. - Hunt for threats, assess intelligence reports, and turn relevant findings into triage and response work. - Coordinate with stakeholders through preparation, identification, analysis, containment, and post-incident review, using lessons learned to improve readiness. - Participate in an on-call rotation.
Requirements - At least five years of practical experience managing large-scale security incidents or working in a SOC, PSIRT, or CSIRT environment. - Strong experience with SIEM systems; examples in the source include ELK, BigQuery, and Splunk, with Splunk preferred. - Expertise in endpoint detection and investigation, including hands-on use of EDR tools. - Clear communication and collaboration skills for fast-moving incidents involving stakeholders across an organization.
Benefits and work setup - Remote locations listed include Germany, Spain, Belgium, the United Kingdom, Finland, Sweden, and the Netherlands. The source also describes flexible work, paid parental leave, professional development reimbursement, and a choice of work hardware and software.