Security Operations (SecOps) Engineer

About the job We're seeking a Security Operations (SecOps) Engineer who will be responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organization's global infrastructure. This role plays a key part in maintaining the security posture of our network, cloud, endpoint, and identity environments. The successful candidate will be a hands-on security professional with experience administering security platforms, supporting incident response activities, managing vulnerabilities, and implementing security controls within hybrid and cloud-based environments. Responsibilities Threat Detection & Incident Response: Monitor, investigate, and respond to security alerts generated by SIEM, EDR/XDR, firewalls, email security, and cloud security platforms. Perform security event triage and escalate incidents as required. Support incident response activities including containment, remediation, and recovery. Participate in root cause analysis and post-incident reviews. Maintain incident documentation and response procedures. Security Operations: Administer and support security solutions including: Microsoft Sentinel Microsoft Defender XDR Defender for Endpoint Defender for Office 365 Defender for Identity Defender for Cloud Apps Microsoft Purview DLP Microsoft Entra ID Protection Darktrace Email or equivalent email security platforms Support onboarding of log sources and security integrations. Assist with tuning alerts and improving detection capabilities. Network & Perimeter Security: Implement and maintain firewall policies and security controls. Support management of Palo Alto firewalls and VPN services, including: Security Policies NAT Policies VPN Gateways Routing Configuration Security Hardening Assist in network segmentation and security reviews. Vulnerability Management: Perform vulnerability assessments and coordinate remediation activities. Track remediation progress and validate resolution. Assist with security hardening initiatives. Azure Security Administration: Support Azure security services including: Conditional Access Policies Microsoft Defender for Cloud Microsoft Entra ID Azure Arc Virtual Network Gateways Network Security Groups (NSGs) Assist with implementing security best practices in Azure environments. Compliance & Documentation: Maintain security documentation, operational procedures, and knowledge articles. Support compliance initiatives including ISO 27001, GDPR, and customer security requirements. Participate in audit preparation and evidence collection activities. Preferred Certifications: SC-200 Security Operations Analyst AZ-500 Azure Security Engineer Security+ CySA+ GIAC Certifications.