Network Security Engineer

About the Role

We are looking for a Network Security Engineer / Senior SOC Analyst to strengthen our Security Operations Center for a fast-growing IT organization with 700+ employees and a diverse technology landscape.

Our environment includes:

• •400+ Linux systems, 200+ Windows machines, and 200+ macOS endpoints
• •Development stack: Node.js, Ruby on Rails (RoR), Rust, Blockchain platforms
• •Domains: Mobile applications, gaming platforms, FinTech systems
• •Infrastructure: Multi-cloud (AWS, Azure, GCP)

This role is ideal for professionals who thrive in complex, high-scale environments and can actively monitor, detect, investigate, and respond to security threats across infrastructure, endpoints, and applications.

Key Responsibilities

• •Monitor and analyze security alerts from SIEM, EDR, IDS/IPS, and cloud security tools
• •Perform real-time threat detection, triage, and incident response across Linux, Windows, and macOS systems
• •Investigate suspicious activities in multi-cloud environments (AWS, Azure, GCP)
• •Conduct log analysis and correlation across infrastructure, applications, and network layers
• •Manage and tune SIEM platforms (e.g., Splunk, LogRhythm, ELK)
• •Handle incident lifecycle: detection → analysis → containment → remediation → reporting
• •Perform endpoint and server-level investigations, especially on Linux-heavy environments
• •Support threat hunting activities and identify advanced persistent threats (APTs)
• •Perform vulnerability analysis and coordinate with engineering teams for remediation
• •Assist in cloud security monitoring including IAM anomalies, misconfigurations, and suspicious activity
• •Maintain incident response playbooks, SOPs, and documentation
• •Generate security reports, dashboards, and metrics for leadership
• •Support compliance requirements (ISO 27001, internal audits, security controls)

Must-Have Qualifications

• •8+ years of experience in SOC, Security Operations, or Incident Response
• •Strong experience in SIEM tools (Splunk, ELK, LogRhythm, QRadar)
• •Hands-on experience with EDR/XDR tools (CrowdStrike, SentinelOne, Defender, etc.)
• •Strong understanding of Linux security (critical), plus Windows and macOS environments
• •Knowledge of networking concepts (TCP/IP, DNS, firewalls, VPNs)
• •Experience in log analysis, threat detection, and incident triage
• •Exposure to multi-cloud environments (AWS, Azure, or GCP)
• •Familiarity with web/app security basics (Node.js, APIs, backend services)
• •Understanding of common attack vectors (MITRE ATT&CK, OWASP Top 10)
• •Experience with vulnerability management tools
• •Basic scripting/automation using Python, Bash, or PowerShell
• •Strong analytical and troubleshooting skills

Preferred / Nice-to-Have

• •Experience in FinTech, blockchain, or gaming environments
• •Exposure to Rust-based systems and blockchain node security
• •Familiarity with DevSecOps and CI/CD security monitoring
• •Experience with threat intelligence platforms
• •Knowledge of container security / Kubernetes
• •Certifications such as Security+, CEH, CySA+, CISSP (or pursuing)