Security Apps & Operations Engineer

Role Summary

We are looking for a motivated Security Apps & Operations Engineer to join our security team. In this role you will be responsible for securing our applications and cloud infrastructure, operating and tuning our SIEM/SOC tooling, and embedding security practices into the software development lifecycle (DevSecOps). You will work cross-functionally with engineering, IT, and compliance teams to identify risks, respond to threats, and continuously improve our security posture. This is a rotational shift role with overlap with US hours.

Key Responsibilities

Application Security & DevSecOps

• Integrate security tooling (SAST, DAST, SCA) into CI/CD pipelines and enforce security gates.

• Conduct vulnerability assessments and coordinate remediation with development teams.

• Perform threat modeling and security code reviews for new features and major changes.

• Maintain and improve application security standards, policies, and secure coding guidelines.

• Track and report on vulnerability metrics, SLA adherence, and risk exposure.

Cloud Security (AWS / Azure / GCP)

• Monitor and enforce cloud security configurations using tools such as AWS Security Hub, Azure Defender, or GCP Security Command Center.

• Manage Identity and Access Management (IAM) policies, least-privilege principles, and privilege access controls across cloud environments.

• Perform cloud infrastructure security reviews and ensure compliance with CIS Benchmarks and organizational standards.

• Respond to cloud security incidents and misconfigurations, driving root-cause analysis and remediation.

SIEM & SOC Operations

• Operate, tune, and maintain SIEM platforms (e.g., Splunk, Microsoft Sentinel, or equivalent).

• Develop and maintain detection rules, correlation queries, and alerting logic to reduce noise and improve fidelity.

• Triage and investigate security alerts; escalate confirmed incidents following the IR playbook.

• Create dashboards and reports to surface key security metrics for stakeholders.

• Participate in on-call rotation for security incident response.

General Operations

• Support audit activities (SOC 2, ISO 27001, or similar) by providing evidence and remediating findings.

• Document runbooks, playbooks, and standard operating procedures.

• Stay current with the threat landscape, emerging CVEs, and security tooling developments.

• Contribute to day-to-day security operation (monitoring)

Requirements

Experience & Education

• 2 – 3 years of hands-on experience in an application security, security operations, or similar role.

• Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.

Technical Skills

• Proficiency with at least one major cloud platform (AWS, Azure, or GCP) and its native security services.

• Experience with SIEM platforms (Splunk, Sentinel, Elastic Security, or similar) — including writing queries/rules (SPL, KQL, etc.).

• Familiarity with DevSecOps tooling: SAST (e.g., Semgrep, SonarQube), DAST (e.g., OWASP ZAP, Burp Suite), SCA (e.g., Snyk, Dependabot).

• Understanding of OWASP Top 10, CVE scoring, and vulnerability management workflows.

• Scripting ability in Python, Bash, or PowerShell for automation and tooling.

• Working knowledge of networking concepts (TCP/IP, DNS, TLS, firewalls, proxies).

Soft Skills 

• Clear written and verbal communication — able to explain technical risk to non-technical stakeholders.

• Detail-oriented with strong analytical and problem-solving skills.

• Collaborative team player who thrives in a fast-paced, cross-functional environment.

Preferred Qualifications

• Industry certifications such as CompTIA Security+, AWS Security Specialty, GCIA, GCSA, CEH, or equivalent.

• Experience with container security (Docker, Kubernetes) and infrastructure-as-code security scanning (Terraform, CloudFormation).

• Familiarity with compliance frameworks: SOC 2, ISO 27001, NIST CSF, or PCI-DSS.

• Prior exposure to incident response or digital forensics workflows.

• Experience with ticketing and ITSM platforms (Jira, ServiceNow).

What We Offer

• Competitive salary and performance-based bonus.

• Comprehensive health, dental, and vision benefits.

• Support for professional certifications and continuous learning.

• Flexible work arrangements.

• Collaborative, security-first culture where your work has real impact.