Senior Cyber Security Engineer, Elastic (Security Operations)

Stack

Responsibilities

• ▹Own the strategy and quality of the detection library in Elastic Security (ES|QL/KQL)
• ▹Lead investigations into complex incidents and proactively hunt threats across AWS, Elastic and Datadog
• ▹Design and implement automated investigation, enrichment and response workflows using SOAR and APIs
• ▹Improve cloud security monitoring, system hardening and security tooling across AWS
• ▹Mentor engineers, influence architectural decisions and champion a security-first culture

Requirements

• ▹6+ years of hands-on security engineering experience
• ▹Deep expertise across incident response, threat hunting, SIEM, digital forensics and scripting
• ▹Experience building and evolving security operations, not just operating them
• ▹Experience designing detections and automating workflows with measurable outcomes

Nice to have

• ▹Experience with Elastic Security, ES|QL or KQL

Soft skills