Senior Operations Security Engineer

Senior Operations Security Engineer

Role Overview:

We are looking for a Senior Operations Security Engineer to help design, build, and operate our Security Operations Center (SOC). In this role, you will lead the development of detection capabilities, improve security visibility, and proactively identify threats through threat hunting and analysis.

You will work closely with engineering, infrastructure, and product teams to strengthen our overall security posture and response capabilities.

Key Responsibilities:

• Monitoring, detection, and analysis of cyber-attacks, threats, and vulnerabilities
• Operations and maintenance of networking and security products (e.g. advanced analytic tools, SIEM, EPP, EDR, IPS, etc.)
• Design, build, and maintain SOC infrastructure and architecture
• Define logging, monitoring, and detection strategies across systems and applications
• Evaluate and implement security tools and technologies
• Develop and maintain detection rules, alerts, and use cases
• Continuously tune and optimize detection logic
• Monitor security events, analyze threats, and identify anomalies
• Collaborate with cross-functional teams to define security monitoring requirements and develop use cases for proactive threat hunting
• Evaluate and select cybersecurity tools and technologies, ensuring they align with the organization's and/or product security requirements and objectives
• Support secure design across infrastructure, applications, and cloud environments
• Provide recommendations and mitigation strategies based on vulnerability assessments and penetration testing
• Enhance security architecture across network, endpoints, and cloud platforms
• Stay up to date with the latest cybersecurity trends, threats, and best practices, and provide guidance and recommendations to stakeholders
• Support incident response efforts, investigating and responding to security incidents, and developing incident response plans
• Support product teams in applying security best practices
• Drive improvements through automation, proof-of-concepts, and innovation
• Maintenance of related operational and procedural documents

• 3+ years of hands-on experience in software engineering, preferably in cloud native technologies
• Good communication skills and ability to work in cross-functional teams
• Fluent in English
• Strong analytical and problem-solving skills, with the ability to assess risks, identify vulnerabilities, and develop effective security solutions
• Strong understanding of security monitoring and incident response
• Hands-on experience with at least one: SIEM, EDR, SOAR, IDS/IPS
• Solid knowledge of network, system, and application security
• Technical understanding of SOCs from the ground up (architecture and design, including strategies for logging, firewalls, network segmentation, etc)
• Experience with cloud platforms (Azure or similar)

• Experience building or scaling a SOC
• Knowledge of DevSecOps, CI/CD security practices
• Experience with threat hunting techniques
• Relevant certifications (e.g., CISSP, CSSLP, CEH, AZ, Security+) are highly desirable

• Hybrid working model (WFH or Office) & flexible working hours
• 24+ days of annual leave
• International team with the possibility for training & upskilling
• Gym & sports activities
• Learning & Development for each employee (including internal platforms & additional budget)
• Having a chance to be mentored by any worldwide expert inside Schneider Electric
• The financial, legal, and psychological assistance program
• Private health insurance
• Summer recharge program during July and August
• Lunch inside our Hub with discounts
• Family policy - Parental leave and Care leave
• Recognition culture through our own StepUp platform & annual bonus
• Building a career in the #1 world sustainable multinational company