Lead Security Operations Engineer

Job summary

The role involves leading the Security Operations function within a Cybersecurity team, focusing on defining and executing the SecOps roadmap to enhance detection, response, and investigation capabilities in a fast-growing fintech environment.

Qualifications

• Over 10 years of experience in security operations, incident response, or related fields, with a proven record of reducing risks and managing incidents.
• Strong development and engineering skills, capable of writing automation code.
• Hands-on experience with SOC and SIEM management, including detection engineering and log pipeline design.
• Familiarity with cloud architectures, particularly AWS and GCP.
• Experience in fintech, payments, or regulated environments is advantageous.

Responsibilities

• Develop and maintain a structured SecOps roadmap based on frameworks like MITRE ATT&CK, NIST, and CIS benchmarks.
• Lead security investigations and digital forensics, managing incident responses effectively.
• Design and optimize the SIEM and logging pipeline to ensure effective data signal processing.
• Enhance perimeter security and authentication measures, including WAF configurations and monitoring.
• Implement data loss prevention (DLP) controls to safeguard sensitive information.
• Improve the on-call rotation, defining alerting and escalation processes.
• Automate detection and response workflows to minimize manual effort and improve resolution times.
• Collaborate with cross-functional teams to translate security needs into actionable changes.

Skills

• Proficient in automation and coding for security controls.
• Strong analytical skills for threat modeling and risk assessment.
• Excellent communication skills for working with non-security engineers.

Education

• Relevant degree or equivalent experience in cybersecurity or a related field.

Tools

• Familiarity with SIEM tools, logging systems, and security frameworks (MITRE, NIST, CIS).