remote
Microsoft Security Operations Engineer - RGH Global
Systems Engineer
Hands‑on Security Operations Engineer focused on monitoring QRadar SIEM, responding to incidents, managing vulnerabilities, and strengthening Microsoft Azure security controls.
About the role
Key Responsibilities
- Operate and fine‑tune QRadar SIEM to detect, analyze, and triage security events across on‑premises and cloud environments.
- Lead incident response activities, coordinating with cross‑functional teams to contain, eradicate, and recover from security incidents.
- Conduct vulnerability assessments, prioritize findings, and oversee remediation efforts in both Windows and Azure infrastructures.
- Implement and maintain Microsoft Defender for Endpoint, Azure Security Center, and related security controls to harden the organization’s posture.
- Collaborate with DevOps and application teams to embed security best practices into CI/CD pipelines and cloud deployments.
Requirements
- 3+ years of experience in a Security Operations Center (SOC) or similar role.
- Proficiency with QRadar SIEM, Microsoft Defender, and Azure security services.
- Strong knowledge of incident response frameworks, threat hunting, and vulnerability management tools.
- Excellent analytical, communication, and problem‑solving skills.
- Relevant certifications such as CISSP, CISM, or Microsoft Certified: Security, Compliance, and Identity Fundamentals are a plus.