onsite
Security Engineer II - Optimize Search Group
Security Engineer
Seasoned Security Engineer II leading Level 2 security operations, incident response, and threat hunting across cloud and on‑prem environments, leveraging SIEM, AWS security services, and Python automation to protect critical assets.
About the role
Key Responsibilities
- Lead Level 2 security operations, triaging alerts and coordinating incident response across cloud and on‑prem environments.
- Conduct proactive threat hunting, vulnerability assessments, and penetration testing to identify and remediate risks.
- Develop and maintain automated playbooks and scripts in Python to streamline detection, response, and reporting.
- Collaborate with cross‑functional teams to implement security controls, hardening procedures, and incident playbooks.
- Analyze security incidents, produce detailed post‑mortem reports, and recommend continuous improvement actions.
Requirements
- 5+ years of hands‑on security engineering experience, with a focus on incident response and threat hunting.
- Proficiency with SIEM platforms (e.g., Splunk, QRadar) and AWS security services (GuardDuty, Security Hub).
- Strong scripting skills in Python and experience automating security workflows.
- Solid understanding of vulnerability management, network security, and secure architecture principles.
- Excellent communication skills and ability to work collaboratively in a fast‑paced environment.