Senior Security Engineer

We are seeking a Senior Security Engineer to help monitor, investigate, and respond to security activity across cloud, identity, endpoint, and Linux-based environments. This role requires hands-on technical ability, strong scripting skills, and practical experience working with AWS, with GCP experience preferred. 

• Monitor and investigate security alerts across cloud, identity, endpoint, and network environments. 
• Review logs and activity from AWS, GCP, Active Directory, Linux systems, Windows systems, and security tools. 
• Support incident response by gathering evidence, validating suspicious activity, and documenting findings. 
• Write scripts to automate repetitive security tasks, log analysis, reporting, or enrichment. 
• Assist with security reviews, including IAM, storage exposure, compute workloads, and network configurations. 
• Investigate authentication activity, user behavior, privilege changes, and potential account compromise. 
• Work with internal teams to understand systems, identify risks, and support remediation, compliance and audit activities.
• Be available for after-hours incident response when urgent security events require investigation or support. 

• Experience with cloud security concepts, services, logs, and IAM. 
• Strong scripting ability, preferably with Python, Bash, or PowerShell. 
• Experience with SIEM platforms such as Splunk, Chronicle, Sentinel, or similar tools.
• Working knowledge of Linux and Windows systems, command line usage, permissions, processes, and logs. 
• Basic to intermediate understanding of Active Directory, including users, groups, authentication, and privilege changes. 
• Ability to read and interpret logs from cloud platforms, operating systems, and security tools. 
• Understanding of common security concepts such as phishing, credential compromise, privilege escalation, lateral movement, and exposed services. 
• Strong analytical, documentation, and communication skills. 

Preferred Skills

• Experience with Google Cloud Platform security, including IAM, Cloud Logging, Compute Engine, Cloud Storage, VPCs, and service accounts. 
• Exposure to Kubernetes, containers, or cloud-native workloads. 
• Experience creating automation for security monitoring or response. 

Minimum Qualifications

• 3-5 years of experience in security operations, incident response, systems administration, cloud operations, or a similar technical role. 
• Hands-on experience using scripts to solve operational or security problems. 
• Comfortable working in both cloud and Linux command-line environments. 

Please note: 

• Candidates must be available for after-hours incident response when urgent security events require investigation or support.
• The interview process will include a hands-on practical exercise conducted through screen sharing, where candidates will be asked to demonstrate relevant technical skills.