Lead Security Engineer - SIEM/SOAR
Description
Role & Responsibilities :
- Lead the design, implementation, and improvement of enterprise security solutions across applications, infrastructure, cloud, and networks.
- Perform security assessments, vulnerability management, penetration testing coordination, and risk analysis.
- Drive incident response activities, including investigation, containment, root-cause analysis, and remediation.
- Develop and maintain security monitoring capabilities using SIEM, EDR, SOAR, and threat intelligence platforms.
- Design and enforce security controls aligned with industry standards such as ISO 27001, NIST, CIS, and OWASP.
- Collaborate with engineering, DevOps, cloud, and infrastructure teams to embed security into the software development lifecycle (DevSecOps).
- Conduct security architecture reviews for applications, APIs, cloud environments, and infrastructure changes.
- Identify emerging threats and recommend proactive security improvements.
Preferred Candidate Profile :
- Bachelors degree in Computer Science, Information Security, Engineering, or a related field.
- 5-8 years of experience in cybersecurity, information security, or security engineering roles.
- Strong hands-on experience in areas such as :
1. Security operations (SOC), SIEM, EDR, and threat monitoring
2. Vulnerability management and remediation
3. Application security and secure coding practices
4. Cloud security (AWS/Azure/GCP)
- Experience with security tools such as :
1. SIEM platforms (Splunk, Microsoft Sentinel, QRadar, Elastic)
2. Vulnerability scanners (Qualys, Tenable, Rapid7)
3. EDR solutions (CrowdStrike, Defender, SentinelOne)
4. Cloud security tools and IAM platforms
- Good understanding of :
1. OWASP Top 10
2. Threat modeling
3. Security architecture principles
4. Encryption, authentication, and access control mechanisms
5. Secure SDLC and DevSecOps practices
- Preferred certifications :
1. CISSP
2. OSCP
3. CEH
4. CCSP
5. AWS Certified Security Specialty
6. GIAC certifications