Security Operations Engineer

Security Operations Engineer

Unit4 Global Cloud Operations Team is seeking a skilled Security Operations Engineer to join our international team. As part of this dynamic team, you will play a key role in maintaining the security and integrity of our cloud infrastructure and environments. You will monitor security systems, analyze threats, and manage security incidents from detection through resolution, ensuring a robust defense against emerging threats.

Key Responsibilities

- Continuous monitoring: Continuously monitor cloud environments for potential security threats.

- Threat Analysis: Analyze security alerts and logs to identify suspicious activities.

- Incident Response: Lead response efforts during security incidents, including containment, eradication, and recovery.

- Investigation: Investigate security breaches and identify root causes.

- Post-Incident Review: Conduct post-incident analysis to suggest improvements.

- Documentation: Document security incidents and maintain detailed records.

- Customer Incident Handling: Act on security incidents reported by customers or identified proactively.

- Policy Adherence: Follow established security policies and procedures.

- System Maintenance: Monitor and maintain security systems such as firewalls, intrusion detection and prevention systems, and SIEM systems.

- Preventative Measures: Implement security measures to prevent future incidents.

- Staying Current: Stay up-to-date with the latest security trends and technologies.

Requirements

Required:

- 3+ years of relevant experience in security monitoring, analysis, and incident response.

- Knowledge and experience in hardening OS and other environments\systems.
- Knowledge and experience with security-related group policies and their implementation.

- Knowledge of forensic analysis and incident management tools.

- Familiarity with SIEM tools and security incident management.

- Strong analytical and problem-solving skills.

- Excellent communication skills, both written and verbal.

- Ability to work under pressure and manage multiple incidents simultaneously.

- Understanding of security policies and procedures.

- Experience with firewalls, intrusion detection/prevention systems, and SIEM systems.

Nice to Have:

- Familiarity with Microsoft Azure & Microsoft certifications.

- Experience with AWS.

- Experience with scripting languages (e.g. PowerShell) for automation.

- Knowledge of networking, and PKI infrastructure.

- Basic Linux skills.