Network Security Engineer

About The Role

We are looking for a Network Security Engineer / Senior SOC Analyst to strengthen our Security Operations Center for a fast‑growing IT organization with 700+ employees and a diverse technology landscape.

• 400+ Linux systems, 200+ Windows machines, and 200+ macOS endpoints
• Development stack:
  Node.js, Ruby on Rails (RoR), Rust, Blockchain platforms
• Domains:
  Mobile applications, gaming platforms, Fin Tech systems
• Infrastructure:
  Multi‑cloud (AWS, Azure, GCP)

This role is ideal for professionals who thrive in complex, high‑scale environments and can actively monitor, detect, investigate, and respond to security threats across infrastructure, endpoints, and applications.

• Monitor and analyze security alerts from SIEM, EDR, IDS/IPS, and cloud security tools
• Perform real‑time threat detection, triage, and incident response across Linux, Windows, and macOS systems
• Investigate suspicious activities in multi‑cloud environments (AWS, Azure, GCP)
• Conduct log analysis and correlation across infrastructure, applications, and network layers
• Manage and tune SIEM platforms (e.g., Splunk, Log Rhythm, ELK)
• Handle incident lifecycle: detection → analysis → containment → remediation → reporting
• Perform endpoint and server‑level investigations, especially on Linux‑heavy environments
• Support threat hunting activities and identify advanced persistent threats (APTs)
• Perform vulnerability analysis and coordinate with engineering teams for remediation
• Assist in cloud security monitoring including IAM anomalies, misconfigurations, and suspicious activity
• Maintain incident response playbooks, SOPs, and documentation
• Generate security reports, dashboards, and metrics for leadership
• Support compliance requirements (ISO 27001, internal audits, security controls)

• 8+ years of experience in SOC, Security Operations, or Incident Response
• Strong experience in SIEM tools (Splunk, ELK, Log Rhythm, QRadar)
• Hands‑on experience with EDR/XDR tools (Crowd Strike, Sentinel One, Defender, etc.)
• Strong understanding of Linux security (critical), plus Windows and macOS environments
• Knowledge of networking concepts (TCP/IP, DNS, firewalls, VPNs)
• Experience in log analysis, threat detection, and incident triage
• Exposure to multi‑cloud environments (AWS, Azure, or GCP)
• Familiarity with web/app security basics (Node.js, APIs, backend services)
• Understanding of common attack vectors (MITRE ATT&CK, OWASP Top 10)
• Experience with vulnerability management tools
• Basic scripting/automation using Python, Bash, or Power Shell
• Strong analytical and troubleshooting skills

• Experience in Fin Tech, blockchain, or gaming environments
• Exposure to Rust‑based systems and blockchain node security
• Familiarity with Dev Sec Ops  and CI/CD security monitoring
• Experience with threat intelligence platforms
• Knowledge of container security / Kubernetes
• Certifications such as Security+, CEH, CySA+, CISSP (or pursuing)