security operations engineer

The Holding Group of Companies

<p>We are seeking a skilled and motivated <b>Cybersecurity Engineer (Mid-Level)</b> to join our team in <b>Doha, Qatar</b>. The ideal candidate will have hands-on experience in cybersecurity operations, security projects, and technology implementations. This role offers an excellent opportunity to contribute to the protection and enhancement of enterprise security environments.</p><p>Key Responsibilities</p><ul><li>Implement, manage, and maintain cybersecurity solutions and security controls.</li><li>Monitor security events, investigate incidents, and support incident response activities.</li><li>Conduct vulnerability assessments and assist with remediation efforts.</li><li>Participate in cybersecurity projects, deployments, and security improvement initiatives.</li><li>Ensure compliance with security policies, standards, and best practices.</li><li>Collaborate with internal teams to strengthen the organization's security posture.</li></ul><p>Requirements</p><ul><li>Minimum <b>4 years of professional experience</b> in cybersecurity.</li><li>Proven experience in cybersecurity projects and implementations.</li><li>Strong understanding of security operations, threat detection, incident response, and vulnerability management.</li><li>Relevant cybersecurity certifications such as:</li><li>Microsoft Defender Certifications</li><li>CISSP (Certified Information Systems Security Professional)</li><li>CEH (Certified Ethical Hacker)</li><li>CompTIA Security+</li><li>Or other equivalent cybersecurity certifications</li><li>Excellent analytical, troubleshooting, and communication skills.</li><li>Ability to work effectively in a fast-paced environment.</li></ul><p>Qualifications</p><ul><li>Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (preferred).</li><li>Hands-on experience with security technologies, endpoint protection, SIEM solutions, and security monitoring tools is an advantage.</li></ul><p>Pay: From QAR4,000.00 per month</p><p>Work Location: In person</p>

Cybersecurity Engineer (Mid-Level)

noon

<div>
 <p>
  <strong>
   About noon
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  We&rsquo;re building an ecosystem of digital products and services that power everyday life across the Middle East&mdash;fast, scalable, and deeply customer-centric. Our mission is to deliver to every door every day. We want to redefine what technology can do in this region, and we&rsquo;re looking for a Cloud Security Engineer who can help us move even faster.
 </p>
 <p>
  noon&rsquo;s mission: Every door, every day
  <strong>
   .
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   What you'll do
  </strong>
  :
 </p>
 <p>
  Team noon has some of the fastest, smartest, and hardest-working people we've encountered. With a young, aggressive, and talented team, we're driving major missions forward.
 </p>
 <p>
  Noon's Group Cybersecurity is looking for a Security Engineer, Cloud &amp; Operations to join our Cloud Security team. This is a hands-on engineering role, you will build cloud-native detections that catch real attacker behavior in GCP, deploy preventive controls at org scale, and investigate the SOC alerts your own detections generate. You write the detection rule, you investigate the alert it fires, and you convert findings into durable controls or tooling that prevents recurrence. We hire engineers who build, not analysts who configure.
 </p>
 <ul>
  <li>
   Build and maintain cloud detection rules in SIEM and EDR including GCP-specific attack paths, and managing them through sandbox validation, retro hunts, false-positive elimination, and risk-scoring alignment.
  </li>
  <li>
   Design and deploy preventive WAF and cloud security controls
  </li>
  <li>
   Investigate security alerts and incidents from the SOC, determine root cause, support remediation with engineering teams, and reduce noise through systematic detection tuning and exemption strategies.
  </li>
  <li>
   Build and maintain internal cloud security tooling, security scanning pipelines, shipping cross-project services that scale across the group.
  </li>
  <li>
   Triage and tune EDR alerts, including detection policy adjustments, response workflow automation, playbook contributions, and endpoint investigation support.
  </li>
  <li>
   Build incident response automations based on established playbooks, including containment workflows, IR actions and isolation responses.
  </li>
  <li>
   Surface cloud security misconfiguration and work with engineering teams on IAM to right-size access without disruption.
  </li>
  <li>
   Partner with DevOps, IT, Product Security, and Offensive Security teams to operationalize cloud restrictions, onboard new environments, validate security controls, and provide evidence for compliance and audit requirements
   <strong>
    .
   </strong>
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   What you'll need
  </strong>
  :
 </p>
 <ul>
  <li>
   2 to 4 years of experience in cloud security, detection engineering, security operations, or software engineering with a security focus.
  </li>
  <li>
   Hands-on experience with GCP security fundamentals: IAM, org policies, service accounts, Cloud Storage, Cloud Build, Cloud Run, or equivalent depth on another major cloud provider.
  </li>
  <li>
   Practical experience writing or maintaining detection rules in a SIEM platform (Splunk, Google SecOps, or similar), including rule authoring, testing, and false-positive management.
  </li>
  <li>
   Ability to investigate security alerts end-to-end: from initial triage through root-cause analysis, evidence collection, and supporting remediation efforts with relevant teams.
  </li>
  <li>
   Familiarity with at least one EDR platform (CrowdStrike Falcon or similar), including alert triage and basic detection tuning.
  </li>
  <li>
   Clear communication skills with the ability to document findings, write incident reports, and coordinate with cross-functional teams without requiring executive escalation.
  </li>
  <li>
   Comfortable working across multiple environments (production, staging, sandbox) and geographies with structured processes and attention to operational impact.
  </li>
  <li>
   Software engineering background preferred - production-quality coding capability in Python, Go, or similar. We want someone who builds tools and services.
  </li>
  <li>
   Experience in product-first, consumer internet, e-commerce, fintech, or marketplace environments - preferred
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Who will excel?
  </strong>
 </p>
 <ul>
  <li>
   We&rsquo;re looking for people with high standards, who understand that hard work matters.
  </li>
  <li>
   You need to be relentlessly resourceful and operate with a deep bias for action.
  </li>
  <li>
   We need people with the courage to be fiercely original.
  </li>
  <li>
   noon is not for everyone; readiness to adapt, pivot, and learn is essential.
  </li>
 </ul>
</div>


Security Engineer - Cloud & Operations

Spry Methods, Inc

<div><div><div><div><b>Who We&rsquo;re Looking For (Position Overview):</b></div>
</div><div>The Cybersecurity Engineer designs, implements, maintains, and improves enterprise security controls across cloud, network, endpoint, and identity environments. This role supports threat detection, incident response, vulnerability management, identity and access management, and security operations aligned to federal security standards and Zero Trust principles.</div></div>
<div><div><h3 class="jobSectionHeader"><b>What Your Day-To-Day Looks Like (Position Responsibilities):</b></h3><div><div><div>
<div>
<ul><li><p>Implement and maintain enterprise security controls aligned to federal security frameworks and Zero Trust architecture.</p>
</li>
</ul></div><div><ul><li><p>Support implementation, operation, and optimization of enterprise security platforms across cloud, on-premises, and hybrid environments.</p>
</li>
</ul></div><div><ul><li><p>Configure and manage identity and access services, including authentication, authorization, role-based access control (RBAC), privileged access management (PAM), and multi-factor authentication (MFA).</p>
</li>
</ul></div><div><ul><li><p>Configure centralized logging, monitoring, and audit capabilities across systems, applications, and cloud platforms.</p>
</li>
</ul></div><div><ul><li><p>Conduct continuous monitoring, vulnerability assessment, risk analysis, and remediation coordination.</p>
</li>
</ul></div><div><ul><li><p>Harden systems, applications, and cloud environments using secure baselines and industry best practices.</p>
</li>
</ul></div><div><ul><li><p>Support incident response activities, forensic collection, root cause analysis, change management, and standard operating procedure (SOP) development.</p>
</li>
</ul></div><div><ul><li><p>Collaborate with network, cloud, and application teams to resolve security issues and improve security posture.</p>
</li>
</ul></div></div></div></div></div></div><div><div><h3 class="jobSectionHeader"><b>What You Need to Succeed (Minimum Requirements):</b></h3><div><div><div>
<div>
<ul><li><p>Five years of experience in cybersecurity engineering or security operations.</p>
</li>
</ul></div><div><ul><li><p>Experience implementing security controls in cloud, network, endpoint, and identity environments.</p>
</li>
</ul></div><div><ul><li><p>Experience with identity and access management (IAM), least privilege, MFA, logging, monitoring, vulnerability management, and security incident response.</p>
</li>
</ul></div><div><ul><li><p>Experience with security baselines, documentation, audit readiness, root cause analysis, and formal change management.</p>
</li>
</ul></div><div><ul><li><p>Ability to meet federal screening and suitability requirements prior to start.</p>
</li>
</ul></div></div></div></div></div></div><div><div>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div></div></div>

Cybersecurity Engineer

Concordant, LLC

<p><b>About Concordant</b></p><p>Concordant LLC delivers mission-critical technology, cybersecurity, and consulting services to government and enterprise clients. Our teams support large-scale modernization and security initiatives that strengthen operational resilience, improve threat visibility, and enable secure service delivery across complex environments.</p><p>We are seeking an experienced <b>Security Detection Engineer &ndash; Consultant</b> to support a <b>state government client</b> in advancing its cybersecurity detection and response capabilities.</p><p>This role supports a statewide security modernization effort focused on improving centralized monitoring, expanding detection coverage, and enhancing threat response across multiple state agencies.</p><p><b>Position Overview</b></p><p>The Security Detection Engineer will be responsible for developing, tuning, and maintaining security detection rules and analytics within the client&rsquo;s SIEM and SOAR environment.</p><p>This role works closely with SOC analysts, threat hunters, engineers, and agency stakeholders to identify detection gaps, improve alert fidelity, and enhance overall security visibility across the enterprise.</p><p>This position may be <b>onsite in Columbia, SC with potential for hybrid or fully remote work depending on candidate fit and program needs</b>.</p><p><b>Responsibilities</b></p><ul><li>Review, tune, and maintain detection rules within the state SIEM environment</li><li>Identify detection coverage gaps through analysis of logs, telemetry, and threat intelligence</li><li>Develop and implement new detection rules and use cases</li><li>Collaborate with SOC analysts to improve alert quality and reduce false positives</li><li>Work with threat hunting teams to identify emerging threats and detection opportunities</li><li>Monitor threat intelligence feeds and translate findings into actionable detections</li><li>Support SOAR workflows, integrations, and automation improvements</li><li>Document detection logic, runbooks, and operational procedures</li><li>Create dashboards, metrics, and reporting for detection coverage and performance</li><li>Coordinate with engineers, SOC teams, and agency stakeholders across multiple agencies</li><li>Support continuous improvement of detection engineering practices and standards</li></ul><p><b>Required Qualifications</b></p><ul><li>5+ years of experience supporting large IT or cybersecurity environments</li><li>5+ years of experience with scripting and automation (Python, PowerShell, Bash, or similar)</li><li>Strong experience with SIEM environments and detection rule development</li><li>Experience with Sigma, YARA, or similar detection languages</li><li>Strong understanding of the MITRE ATT&amp;CK framework</li><li>Experience working in enterprise or multi-tenant environments</li><li>Strong communication skills and ability to support agency-facing collaboration</li><li>Experience working in security operations or detection engineering roles</li></ul><p><b>Preferred Qualifications</b></p><ul><li>Experience with Palo Alto Cortex XSIAM or similar modern SIEM platforms</li><li>Experience in threat hunting or security analytics engineering</li><li>Deep understanding of Windows and Linux system artifacts</li><li>Experience supporting large-scale enterprise or multi-agency environments</li><li>Security certifications such as CISSP, CISA, CEH, OSCP, or GPEN</li></ul><p><b>Education</b></p><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or related field</li><li><b>OR</b></li><li>8+ years of equivalent professional cybersecurity experienceWork Location</li><li>Columbia, South Carolina (Onsite preferred)</li><li>Hybrid or Remote possible depending on candidate qualifications and program requirements</li><li>Full-time consulting engagement</li><li>12-month duration with potential for extension</li></ul><p><b>Pre-Employment Requirements</b></p><p>Employment is contingent upon successful completion of:</p><ul><li>Criminal background check</li><li>Drug screening</li><li>Driving record check</li><li>Credit check</li><li>E-Verify verification</li><li>SLED security screening</li><li>Confidentiality agreement</li></ul><p><b>Why Join Concordant?</b></p><ul><li>Support a statewide cybersecurity modernization initiative</li><li>Work alongside SOC, engineering, and threat hunting teams</li><li>Contribute to improving detection capability across multiple agencies</li><li>Gain exposure to modern SIEM and detection engineering platforms</li><li>High-impact role in a mission-critical security program</li></ul><p><b>Concordant LLC is an Equal Opportunity Employer.</b></p><p>Pay: Up to $124,800.00 per year</p><p>Application Question(s):</p><ul><li>Will you now or in the future require sponsorship for employment?</li><li>What is your current physical mailing address? (SBA HUBZone check)</li><li>Do you have any relevant certifications?</li></ul><p>Education:</p><ul><li>Bachelor's (Preferred)</li></ul><p>Experience:</p><ul><li>supporting large IT environments: 5 years (Required)</li><li>scripting/automation (python, bash, powershell): 5 years (Required)</li><li>understanding Sigma, Yara, or other detection languages: 1 year (Required)</li><li>MITRE ATT&amp;CK framework understanding: 1 year (Required)</li></ul><p>Work Location: Hybrid remote in Columbia, SC 29201</p>

Security Detection Engineer

UltraViolet Cyber

<div><div><b>Make a difference here.</b></div><div></div><div><br>
UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.<br>
</div><div></div><br>
<div>By creating continuously optimized identification, detection, and resilience from today&rsquo;s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India.</div><div></div><p><br>
The Senior Security Tooling Engineer will join a team supporting one of UltraViolet's Federal Customers. The focus of the role will be to evaluate the effectiveness, configuration, and integration of enterprise and AWS-native security tools.</p>
<h3 class="jobSectionHeader"><b>
What You'll Do:</b></h3><div>
<div>
<div><ul><li><p>Assess enterprise security tools such as:</p>
</li>
</ul></div><div><ul><li><p>SIEM platforms</p>
</li>
</ul></div><div><ul><li><p>IDS/IPS solutions</p>
</li>
</ul></div><div><ul><li><p>Vulnerability management systems</p>
</li>
</ul></div><div><ul><li><p>Evaluate AWS-native security services including:</p>
</li>
</ul></div><div><ul><li><p>AWS GuardDuty</p>
</li>
</ul></div><div><ul><li><p>AWS Macie</p>
</li>
</ul></div><div><ul><li><p>AWS Inspector</p>
</li>
</ul></div><div><ul><li><p>Conduct configuration reviews against:</p>
</li>
</ul></div><div><ul><li><p>CIS Benchmarks</p>
</li>
</ul></div><div><ul><li><p>AWS Well-Architected Framework</p>
</li>
</ul></div><div><ul><li><p>Review logging and monitoring configurations to ensure adequate coverage and visibility</p>
</li>
</ul></div><div><ul><li><p>Support or perform vulnerability assessments and penetration testing to validate tool effectiveness</p>
</li>
</ul></div><div><ul><li><p>Analyze tool integration and data flow between systems</p>
</li>
</ul></div><div><ul><li><p>Identify gaps, redundancies, and opportunities for optimization</p>
</li>
</ul></div></div><div><div><ul><li><p>Provide recommendations to improve tooling effectiveness and coverage</p>
</li>
</ul></div></div></div><h3 class="jobSectionHeader"><b>What You've Done:</b></h3><div>
<div> <div><ul><li>7+ years hands-on experience with security tools and AWS security services</li>
</ul>
<div><ul><li><p>Experience with AWS security services and cloud security tooling</p>
</li>
</ul></div><div><ul><li><p>Experience performing tool assessments, audits, or implementations</p>
</li>
</ul></div><div><p>Core Certifications:</p>
</div>
<div><ul><li><p>AWS Certified Cloud Practitioner</p>
</li>
</ul></div><div><ul><li><p>CompTIA Security+ (baseline, if needed)</p>
</li>
</ul></div><div><p>Tool/Platform &amp; Cloud:</p>
</div>
<div><ul><li><p>AWS Certified Security &ndash; Specialty</p>
</li>
</ul></div><div><ul><li><p>Splunk Certified Architect / Power User</p>
</li>
</ul></div><div><ul><li><p>Microsoft SC-200 or equivalent</p>
</li>
</ul></div><div><p>Pen Testing / Validation (Preferred):</p>
</div>
<div><ul><li><p>OSCP (Offensive Security Certified Professional)</p>
</li>
</ul></div><div><ul><li><p>CEH (Certified Ethical Hacker)</p>
</li>
</ul></div><div><p>Clearance Requirement: Active TS/SCI with SCI Polygraph (or eligible)</p></div><br>
</div>
</div></div><div></div><h3 class="jobSectionHeader"><b>What We Offer:</b></h3><div>
<ul><li>401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed
</li><li>Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)
</li><li>Group Term Life, Short-Term Disability, Long-Term Disability
</li><li>Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness
</li><li>Participation in the Discretionary Time Off (DTO) Program
</li><li>11 Paid Holidays Annually</li>
</ul></div><div>UltraViolet Cyber maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect our company's differing products, services, industries and lines of business. Candidates are typically placed into the range based on the preceding factors.</div><div></div><div><br>
We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable.<br>
</div><div></div><br>
<div><b>UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status.</b></div><div></div><div><br>
If you want to make an impact, UltraViolet Cyber is the place for you!</div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

AWS Cloud Security Engineer (Top Secret)

Paksa IT soloutions (Pvt.) Limited

<p><b>Role Purpose</b></p><p>The Senior Cyber Security Engineer is responsible for protecting the organization's information systems, networks, applications, and digital assets from cyber threats. The role involves designing and implementing security controls, monitoring security events, conducting risk assessments, responding to incidents, and ensuring compliance with cybersecurity standards and best practices.</p><p>The ideal candidate will possess strong technical expertise in information security, threat management, security operations, and risk mitigation while contributing to the organization's overall security strategy.</p><p><b>Key Responsibilities</b></p><p><b>Security Operations &amp; Monitoring</b></p><ul><li>Monitor and analyze security events, alerts, and incidents across the organization.</li><li>Manage and optimize security tools such as SIEM, EDR, IDS/IPS, firewalls, and antivirus solutions.</li><li>Conduct threat hunting and proactive security monitoring activities.</li><li>Investigate suspicious activities and coordinate incident response efforts.</li></ul><p><b>Security Architecture &amp; Implementation</b></p><ul><li>Design, implement, and maintain enterprise security solutions and controls.</li><li>Ensure secure configuration of networks, servers, endpoints, and cloud environments.</li><li>Evaluate and recommend security technologies and improvements.</li><li>Support secure software development and application security initiatives.</li></ul><p><b>Risk Management &amp; Compliance</b></p><ul><li>Conduct vulnerability assessments and security audits.</li><li>Perform risk assessments and recommend mitigation measures.</li><li>Ensure compliance with ISO 27001, NIST, PCI-DSS, and other applicable standards.</li><li>Develop and maintain security policies, procedures, and documentation.</li></ul><p><b>Incident Response &amp; Business Continuity</b></p><ul><li>Lead security incident investigations and remediation activities.</li><li>Coordinate digital forensic analysis when required.</li><li>Develop and test incident response and disaster recovery plans.</li><li>Prepare post-incident reports and improvement recommendations.</li></ul><p><b>Training &amp; Stakeholder Engagement</b></p><ul><li>Conduct cybersecurity awareness and training sessions for employees.</li><li>Collaborate with internal teams and external vendors on security initiatives.</li><li>Provide regular security reports and updates to management.</li><li>Mentor junior security team members and promote security best practices.</li></ul><p><b>Job Specification</b></p><p><b>Education</b></p><ul><li>Bachelor's degree in Computer Science, Cyber Security, Information Security, Information Technology, or a related field.</li></ul><p><b>Experience</b></p><ul><li>3&ndash;5 years of experience in Cyber Security, Information Security, or Network Security.</li><li>Experience in Security Operations, Incident Response, Risk Management, and Security Compliance.</li></ul><p><b>Skills Required</b></p><ul><li>Strong knowledge of network security, cloud security, and endpoint protection.</li><li>Hands-on experience with SIEM platforms (Splunk, QRadar, Microsoft Sentinel, etc.).</li><li>Experience with vulnerability management tools (Nessus, Qualys, OpenVAS).</li><li>Knowledge of firewalls, IDS/IPS, VPNs, IAM, and security protocols.</li><li>Understanding of Windows, Linux, and cloud platforms (AWS, Azure, GCP).</li><li>Strong analytical, problem-solving, and incident investigation skills.</li><li>Excellent communication and reporting abilities.</li></ul><p><b>Certifications (Preferred)</b></p><ul><li>CEH (Certified Ethical Hacker).</li><li><b>Comp TIA Security+.</b></li><li>ISO 27001 Lead Implementer / Lead Auditor.</li><li>CCSP (Certified Cloud Security Professional).</li></ul><p><b>Other Requirements</b></p><ul><li>Ability to work under pressure and manage critical security incidents.</li><li>Strong attention to detail and commitment to security best practices.</li><li>Willingness to stay updated with evolving cybersecurity threats and technologies.</li><li>Ability to work collaboratively with cross-functional teams.</li></ul><p><b>Preference</b></p><p>Candidates with proven experience in Security Operations Centers (SOC), threat hunting, incident response, cloud security, and cybersecurity compliance frameworks will be given priority.</p><p><b>Location:</b><br/>Karachi,Pakistan</p><p><b>Note: </b>This is a strictly onsite role. Remote and hybrid work arrangements are not available for this position.</p><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>Current Salary </li><li>Expected Salary</li><li>Which vulnerability management tools have you used?</li></ul><p>□ Nessus<br/>□ Qualys<br/>□ OpenVAS<br/>□ Rapid7<br/>□ Other: <i>__</i><i>__</i>__</p><ul><li>Which cybersecurity compliance frameworks have you worked with?</li></ul><p>□ ISO 27001<br/>□ NIST<br/>□ PCI-DSS<br/>□ CIS Controls<br/>□ Other: <i>__</i><i>__</i>__</p><ul><li>Do you have experience managing or configuring the following?</li></ul><p>□ Firewalls<br/>□ IDS/IPS<br/>□ VPNs<br/>□ IAM Solutions<br/>□ EDR/XDR Tools</p><ul><li>Which cybersecurity certifications do you currently hold?</li></ul><p>□ CEH<br/>□ CompTIA Security+<br/>□ ISO 27001 Lead Auditor<br/>□ ISO 27001 Lead Implementer<br/>□ CCSP<br/>□ CISSP<br/>□ Other: <i>__</i><i>__</i>__</p><ul><li>Yes</li></ul><p>No</p><ul><li>How many years of professional experience do you have in Cyber Security, Information Security, or Network Security?</li><li>Which SIEM platforms have you used?</li></ul><p>□ Splunk<br/>□ QRadar<br/>□ Microsoft Sentinel<br/>□ ArcSight<br/>□ Other: <i>__</i><i>__</i>__</p><p>Work Location: In person</p>

Cyber Security Engineer

Agoda

<div>
 <strong>
  About Agoda
  <br/>
  <br/>
 </strong>
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 <br/>
 <br/>
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 <br/>
 <br/>
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 <br/>
 <br/>
 We are looking for a hands on Senior Security Engineer to secure our cloud and platform environments. This role works closely with engineering teams and focuses on building, reviewing, and operating security controls using Infrastructure as Code, Kubernetes, and custom security services written in Go and TypeScript.
 <br/>
 <br/>
 <strong>
  Key Responsibilities:
  <br/>
  <br/>
 </strong>
 Secure Cloud Deployment:
 <br/>
 <br/>
 <ul>
  <li>
   Design, implement, and manage secure cloud deployments across AWS and GCP environments using Terraform.
  </li>
  <li>
   Kubernetes &amp; GitOps Security: Deploy and manage both internal and third‑party security products within the Kubernetes ecosystem.
  </li>
  <li>
   Work with GitOps workflows using tools like Argo CD and Flux, and Helm charts.
  </li>
  <li>
   Security Automation &amp; Tooling: Design and build security tooling and services using Go and TypeScript.
  </li>
  <li>
   Misconfiguration Management: Proactively identify, analyze, and remediate cloud misconfigurations.
  </li>
  <li>
   Cloud Architecture Guidance: Provide guidance to Engineering teams on secure architecture.
  </li>
  <li>
   Threat Detection &amp; Response: Build and optimize cloud-native detection rules and alerting pipelines to monitor for suspicious activities within the cloud and container workloads.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Skills &amp; Experience:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   8+ years of experience in security engineering, cloud security, or platform engineering roles.
  </li>
  <li>
   Hands-on experience securing production workloads in AWS and GCP.
  </li>
  <li>
   Strong experience designing and securing Infrastructure as Code using Terraform.
  </li>
  <li>
   Deep understanding of Kubernetes security, including troubleshooting Helm deployments and GitOps-based workflows.
  </li>
  <li>
   Strong programming skills in Go and TypeScript, with Python used for automation where appropriate.
  </li>
  <li>
   Experience embedding security controls into CI/CD pipelines.
  </li>
  <li>
   Certifications (Required) Certified Kubernetes Administrator (CKA) Certified Kubernetes Security Specialist (CKS) Certifications (Preferred) AWS Certified Security
  </li>
  <li>
   Specialty Google Professional Cloud Security Engineer HashiCorp Certified: Terraform Associate
  </li>
  <li>
   Nice-to-Have Experience with Policy-as-Code frameworks such as Open Policy Agent (OPA).
  </li>
  <li>
   Experience securing service mesh environments (Istio). Background in software engineering or platform engineering before moving into security.
   <br/>
   <br/>
  </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester  #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 <br/>
 <br/>
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 <br/>
 <br/>
 <strong>
  Discover More About Working At Agoda
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Agoda Careers https://careersatagoda.com
  </li>
  <li>
   Facebook https://www.facebook.com/agodacareers/
  </li>
  <li>
   LinkedIn https://www.linkedin.com/company/agoda
  </li>
  <li>
   YouTube https://www.youtube.com/agodalife
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Equal Opportunity Employer
  <br/>
  <br/>
 </strong>
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 <br/>
 <br/>
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 <br/>
 <br/>
 <strong>
  Disclaimer
  <br/>
  <br/>
 </strong>
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 <br/>
 <br/>
</div>


Security Engineer (Bangkok Based, Relocation Support)

Search 9414+ Security operations engineer jobs near you this June. New roles added regularly across leading industries. Apply today.