Remote (Senior) Security Operations Engineer

Description:

• The (Senior) Security Operations Engineer at Funding Societies | Modalku will lead efforts in identifying, analyzing, evaluating, and responding to security risks and threats.
• Responsibilities include conducting security threat identification, analysis, and remediation to ensure timely mitigation and understanding of potential business impacts.
• The Engineer will act as an incident handler, managing security incidents end-to-end based on defined processes.
• Involvement in Splunk Cloud Administration, including integrations, use case creation, and continuous service improvement.

Requirements:

• Incident Response:

  • Monitor and analyze security alerts and incidents to identify threats.
  • Investigate security incidents promptly using various tools.
  • Coordinate and execute incident response activities with cross-functional teams.
  • Contain and mitigate security incidents to minimize impact.
  • Develop and implement incident response plans to enhance organizational resilience.
  • Create incident reports for applicable incidents.

• Log Management and Integrations:

  • Configure and integrate log sources into Splunk Cloud, creating dashboards for various use cases.
  • Develop and maintain log management strategies for data collection and indexing.
  • Troubleshoot and optimize log sources for enhanced data accuracy.
  • Collaborate with internal and external teams to develop and fine-tune correlation rules and alerts.

• Threat Intelligence:

  • Stay updated on cybersecurity threats and vulnerabilities.
  • Review threat intelligence reports and take necessary actions.

• Collaboration:

  • Collaborate with internal teams and external partners to share incidents and improvements.
  • Participate in cross-functional training exercises and mentor team members.

• Experience:

  • Minimum 5 years of incident response experience.
  • Experience in Splunk or Splunk Cloud administration/engineering.
  • Experience in responding to phishing, malware, and DoS attacks.
  • Experience in SIEM, log reviews, and integration of log sources.
  • Self-motivated, quality-oriented, and able to work under the guidance of the Security Operations Manager.

Benefits:

• Time Off: Flexible paid vacations, observed holidays, and special days off.
• Flexible Working: Control over work-life balance.
• Medical Benefits: Health insurance coverage for employees and dependents.
• Mental Health and Wellness: Wellness programs, well-being coaching, and fitness sessions.
• Learning & Development: Curated learning programs on an internal platform.
• Tech Support: Company laptop and support for high productivity.