Summary
The Senior SecOps Engineer is responsible for protecting SELISE cloud and application environments through security monitoring, threat detection and response, vulnerability management, cloud security, identity and access controls, and security automation. The role works closely with DevOps, engineering, and infrastructure teams to embed security into the software delivery and operational lifecycle.
What You Will Do
- You operate and continuously improve security monitoring and threat detection capabilities using Microsoft Sentinel, SIEM/SOAR, EDR, CSPM, vulnerability scanners, and related security platforms.
- You monitor and investigate security alerts, suspicious activity, and potential incidents, and lead or support containment, root-cause analysis, remediation, and incident response.
- You implement and maintain cloud security controls across Azure environments, including IAM/RBAC, privileged access, service identities, Key Vault/secrets, networking, and access-management controls.
- You secure AKS/Kubernetes clusters, Docker containers, cloud-native workloads, networking, secrets, and container images.
- You manage vulnerability identification, prioritization, remediation tracking, security hardening, CVE response, VAPT activities, and penetration-testing remediation.
- You integrate security controls and automated security checks into CI/CD and DevSecOps workflows and develop automation tooling to reduce manual investigation and response effort.
- You support Terraform/IaC security, policy-as-code, security architecture reviews, and security-by-design practices across multi-environment enterprise cloud platforms.
- You maintain security documentation, procedures, incident records, and audit evidence, and support controls related to ISO 27001 and GDPR.
- You collaborate closely with DevOps, developers, architects, infrastructure teams, and management to communicate security risks and remediation priorities.
- You embed security requirements, reviews, testing, and risk-mitigation controls across each phase of the enterprise application development lifecycle
Who You Are
- You have 5+ years of experience in Security Operations, Cloud Security, DevSecOps, Infrastructure Security, or a related field.
- You have a strong understanding of security operations, threat detection, incident response, security monitoring, vulnerability management, CVEs, security hardening, and remediation.
- You have hands-on experience with Azure security services and cloud security architecture, and practical knowledge of Microsoft Sentinel or another SIEM platform.
- You have strong knowledge of IAM/RBAC, networking, identity, privileged access, secrets management, Key Vault, and access-control concepts.
- You have experience securing Kubernetes/AKS, Docker containers, cloud-native workloads, and container images.
- You understand VAPT and penetration-testing findings and can drive practical remediation.
- You have knowledge of DevSecOps, secure SDLC, CI/CD security integration, Terraform/IaC security, and policy-as-code.
- You have scripting and automation skills using Bash, Python, PowerShell, or similar tools.
- You understand security standards and controls such as ISO 27001 and GDPR and are familiar with SIEM/SOAR, EDR, CSPM, vulnerability scanners, and security automation platforms.
- You bring a security-first, automation-oriented approach, proactively identify and remediate risks, and communicate incidents, security risks, and remediation priorities clearly.
- You have strong analytical, incident-management, communication, documentation, and cross-functional collaboration skills.
- Relevant cloud or security certifications, such as Azure Security Engineer, Security Operations, or equivalent, are an advantage.
What You Can Expect
- A competitive salary and growth-oriented career path.
- A collaborative environment with supportive peers, mentors, and a strong engineering culture.
- Opportunities to participate in innovation initiatives, architecture discussions, and technical leadership.
- Continuous learning through training, knowledge sharing, and hands-on challenges.
- Team building events and recreational activities.
- Plenty of scope to experiment, innovate, and make a real impact
