SecOps Engineer

In this role, you will monitor security tools, including SIEM (QRadar), and respond to threat detection alerts. You will triage, analyze, and prioritize security incidents using ServiceNow. Investigating root causes of security issues and designing effective remediation solutions will be key responsibilities. You will oversee patch management, conduct vulnerability scans with Qualys, analyze results, and prioritize remediation. Documentation of SecOps processes and creating knowledge base articles in line with best practices is crucial. Automating security tasks and toolchains using scripting (PowerShell, Batch, etc.) is expected, as well as collaborating with external SOC teams. You will prepare post-incident reports and root cause analyses, manage end-user device (EUD) security via MS Intune, Sophos, and NinjaOne, and schedule vulnerability scans on critical infrastructure. Maintaining patching compliance for OS, Microsoft Office, and third-party applications will also fall under your purview. Supporting infrastructure teams to deploy systems, enhance security policies, and manage security-driven changes, as well as producing weekly security operations reports and managing Cisco Umbrella web filtering and SSL inspection policies, will be part of your role.