A brief statement (3-5 sentences) describing the main purpose of the job and an overall summary or purpose of what it does. The intent of this statement is to describe why the job exists and what the incumbent is expected to accomplish.
The Sr. Security Operations Engineer is responsible for executing the the design, implementation, and maintenance of security systems, processes, and controls to protect the organization's IT infrastructure, data assets, and information systems. The role will collaborate with cross-functional teams to develop and execute security strategies, policies, and initiatives to mitigate security risks and ensure compliance with industry standards and regulatory requirements.
Primary Responsibility: Percent of Time Spent on Task
(1-100%)
1. Execute and maintain Security Operations Checklists & Tactical Procedures 10%
2. Project manage and lead the execution and direction of the information security program as it relates to Security Operations Teams. 10%
3. Lead teams on technical tactical approaches and provides hands on experience and execution for strategic roadmap initiatives. 10%
4. Implement & improve security incident response plans, procedures, and protocols to detect, respond to, and mitigate security incidents and breaches. 10%
5. Respond to the Monitoring of security systems, tools, and technologies for threats, vulnerabilities, and suspicious activities. 10%
6. Conduct regular security assessments, audits to identify weaknesses and vulnerabilities in the organization's infrastructure and applications. 10%
7. Coordinate and collaborate with internal stakeholders, external partners, and third-party vendors to address security issues and implement remediation measures. 10%
8. Define and establish security operations principles, standards, and best practices for the organization. 10%
9. Implementing phishing Simulation and Security Awareness platforms 10%
10. Develop and maintain security operations playbooks to ensure alignment with business requirements and objectives. 10%
Minimum Requirements typically required for someone to be performing fully (competent) in this job:
Level of Formal Education: Bachelors or Relevant Work Experience
Area of Study: Computer Science, Information Technology or Relevant Work Experience
Years of Experience: • Min 5 years of experience, required.
Type of Experience: • Bachelor's degree in Computer Science, Information Security, or related field; Master's degree or relevant certifications (e.g., CISSP, CISM, CEH) preferred.
• Proven experience in security operations
• In-depth knowledge of security technologies, tools, and practices, including threat detection, incident response, encryption, network security, and security frameworks.
• Demonstrated experience in leading teams, including day to day prioritization of work, reviewing system changes and approving all work going into Production.
• Preferably proven experience in building relationships with business partners to align and deliver on common objectives for the company
Language Skills:
● English Technical Competencies: ● Preferred MSP experience
● Experience with Active Directory, AWS, Oracle, Azure/Entra, and other Cloud technologies.
● Experience with Linux access control.
● Experience with secure authentication strategies.
● Knowledge of and experience with cloud architecture deployments and SaaS, PaaS and IaaS solutions.
● PowerShell scripting
● In Depth understanding of Network Security
● In Depth knowledge of security tools such as, endpoint security tools, network monitoring tools, SIEM, Phishing Simulation tools, Vulnerability Management & App Code Analysis tools, Web Application Firewalls tools, Email Security Platforms
Competencies: • Ability to execute simultaneous projects to successful delivery.
• Ability to communicate (verbally and in writing) effectively with stakeholders and senior business leadership of departments and customers participating in this project.
• Ability to organize and work effectively with project teams made up of internal staff and/or external parties.
• Demonstrated experience and relevant expertise in the configuration and deployment of Information Systems business solutions.
• Strong technology skills with the ability to synthesize relevant information and make key decisions.
• Strong analytical skills to relate security requirements to appropriate security controls including sensitive data management.
• Strong project management skills and experience in creating and managing project plans, including budgeting and resource allocation.
• Excellent communication abilities and relationship building skills.
• Written, verbal, and presentation skills with the ability to effectively interact with internal and external business partners.
