Lead Engineer, Platform Security Operations

Job summary

This role involves shaping and enhancing a detection and response platform within a security operations team. The position focuses on building scalable security capabilities that support cloud-native, PaaS, and SaaS solutions, while also integrating security monitoring into various applications and services.

Qualifications

• Over 5 years of experience in Security Engineering, SecOps Engineering, or Security Platform Engineering.
• Practical experience in a Security Operations Center (SOC), incident response, or detection and response environments.
• Proficient with SIEM platforms, log management, and security data engineering.
• Familiarity with Infrastructure as Code (Terraform, Bicep/ARM, etc.) and DevOps methodologies.
• Strong programming skills in Python for automation and tooling development.
• Experience with Git, CI/CD pipelines, and platform-as-code practices.
• Understanding of Azure, Entra ID, and Active Directory.
• Experience in integrating security platforms with enterprise technologies.
• Excellent collaboration and stakeholder management skills.

Responsibilities

• Own and enhance the SecOps platform, including SIEM, XDR, and NDR technologies.
• Develop and maintain scalable data pipelines for cloud and SaaS applications.
• Create integrations and automation across the security ecosystem, including SOAR and IAM.
• Collaborate with product and engineering teams to embed security monitoring in new services.
• Support detection engineers by providing reliable platform capabilities.
• Improve platform reliability, performance, and operational efficiency.
• Participate in incident response and the on-call rotation.

Skills

• Security Engineering and SecOps expertise.
• Strong programming and automation skills.
• Experience with cloud technologies and security integrations.

Education

• Relevant degree or equivalent experience in a related field.

Tools

• SIEM, XDR, NDR, Terraform, Python, Azure.