Security Operations & Support Engineer

Job Overview

We are seeking a highly skilled Security Operations & Support Engineer to join our team. In this role, you will be responsible for end-to-end security operations across telecom core networks and IT infrastructure—ranging from real-time monitoring, threat detection, and incident response, to technical troubleshooting, root cause analysis (RCA), and legal compliance coordination. This position requires experience in telecommunications (specifically in the Core domain) and willingness to work on a rotational shift schedule.

Detailed Job Responsibilities

· Real-Time Security & Core Network Monitoring:

· Continuously monitor security dashboards, telecom core network activities, server/OS logs, and database metrics.

· Monitor network connectivity, API endpoints, data pipelines, and batch job executions for unauthorized activity, fraud, or anomalies.

· Incident Detection, Containment & Recovery:

· Detect security events and system anomalies, promptly creating structured incident tickets.

· Classify incident severity levels (P1 Critical, P2 High, P3 Medium, P4 Low) based on potential operational and business impact.

· Perform first-level containment and advanced troubleshooting for complex telecom security incidents.

· Execute application/service restarts, job reruns, and system recovery procedures.

· Regulatory & Law Enforcement Coordination:

· Serve as a technical point of contact to coordinate with Law Enforcement Agencies (LEAs) for lawful requests, data requests, and incident inquiries.

· Maintain strict compliance, audit trails, confidentiality, and chain of custody when handling sensitive data and legal requests.

· Root Cause Analysis (RCA) & Process Improvement:

· Lead Root Cause Analysis (RCA) investigations for major security incidents to identify underlying vulnerabilities and prevent recurrence.

· Author, update, and maintain comprehensive security SOPs and operational runbooks.

· Escalation & Vendor Coordination:

· Execute predefined read-only SQL queries to verify system health and audit logs.

· Collaborate with L3 engineering teams, telecom principals, or third-party vendors for major software defects, core network issues, or complex escalations.

Required Competencies & Qualifications

· Education: Bachelor’s degree in Cyber Security, Telecommunications Engineering, Computer Science, Information Technology, or equivalent.

· Experience: 2–4 years of experience in Security Operations (SOC), Network Security, or Telecom Security. Experience in Telecommunications with a strong understanding of Core Network domain is required.

· Technical Skills:

· Telecom Core Network: Proven understanding of Telecommunications Core Network architecture, protocols, and security requirements.

· Monitoring & SIEM Tools: Intermediate to Advanced proficiency in Zabbix, Grafana, or SIEM platforms for security monitoring and alert handling.

· Operating Systems: Strong hands-on knowledge of Linux command line operations, administration, and security controls.

· Programming & Scripting: Mandatory proficiency in Python for security automation; working knowledge of Bash/Shell scripting.

· SQL & Databases: Intermediate to Advanced SQL skills for query execution, log analysis, and database security monitoring.

· Networking & Security: Solid understanding of networking protocols, API integration troubleshooting, SFTP security, and access control management.

· Certifications (Plus Point / Value Add)

· Core Competencies & Requirements:

· Law Enforcement Coordination: Readiness and capability to coordinate professionally with Law Enforcement Agencies.

· Shift Work: Willingness to work in a 24x7 rotational shift schedule.

· Incident Management: Strong expertise in structured incident response, containment practices, and escalation workflows.

· Problem Solving: Demonstrated capability in Root Cause Analysis (RCA) and technical problem determination.