
Senior Security Operations Engineer
- España
- Permanente
- Tiempo completo
- Building and maturing an automated, modular SOC integrated with our cloud platform and products, leveraging modern practices and tooling.
- Designing and implementing effective threat intelligence capabilities to detect and remediate security issues proactively.
- Ensuring that all aspects of our operating products and the supply chain delivering them have effective security observability, striving for early detection and resolution of security incidents.
- Bringing a strong technical security skill set to the overall strategy and direction of our security operations and our Platform & Security teams to enable Mews to operate with a 'best possible' security posture in the cloud.
- Leading post-mortems for security incidents, fostering a culture of continuous improvement and awareness of security practices across the organisation.
- Developing and automating disaster response plans, resilient systems engineering practices, and security automation workflows.
- Developing detections and playbooks within Azure Sentinel to automate response actions for high-fidelity alerts.
- Collaborating with teams to improve the integration of security tooling into Azure environments, ensuring comprehensive logging and monitoring.
- Genuinely cares and enjoys helping your users, whilst balancing their needs with the business and security needs.
- Pursues tangible outcomes but has an incredible eye for detail.
- has excellent interpersonal skills/EQ, you are a low ego learner and sharer.
- Is a proven expert in technical delivery, architecting, developing, and maintaining security capabilities that enable builder teams to do their best work.
- Has a strong bias towards action
- Has excellent communication skills, including communication with less-technical staff
- Has experience working in and contributing to an environment that supports a diverse team
- A desire to mentor junior teammates
- Hands-on experience with security operations implementation and utilization, security automating, and threat intelligence.
- Incident response drill exercises
- Supply Chain elements, including all elements around the delivery of software
- Development and scripting
- Alerting and monitoring tooling, and building a sustainable SIEM process
- Running post-mortems and teaching the culture of security to non-ops engineers
- Disaster response, resilient systems engineering, and security automation
- Cloud security and systems hardening
- Comfortable both with pair working and with independent work managing their own projects; but is also confident with sense-checks and check-ins to avoid chasing too many issues down rabbit holes.