Monitor and investigate security alerts across cloud, identity, endpoint, and network environments.
Review logs and activity from AWS, GCP, Active Directory, Linux systems, Windows systems, and security tools.
Support incident response by gathering evidence, validating suspicious activity, and documenting findings.
Write scripts to automate repetitive security tasks, log analysis, reporting, or enrichment.
Assist with security reviews, including IAM, storage exposure, compute workloads, and network configurations.
Investigate authentication activity, user behavior, privilege changes, and potential account compromise.
Work with internal teams to understand systems, identify risks, and support remediation, compliance, and audit activities.
Be available for after-hours incident response when urgent security events require investigation or support.

Experience with cloud security concepts, services, logs, and IAM.
Strong scripting ability, preferably with Python, Bash, or PowerShell.
Experience with SIEM platforms such as Splunk, Chronicle, Sentinel, or similar tools.
Working knowledge of Linux and Windows systems, command line usage, permissions, processes, and logs.
Basic to intermediate understanding of Active Directory, including users, groups, authentication, and privilege changes.
Ability to read and interpret logs from cloud platforms, operating systems, and security tools.
Understanding of common security concepts such as phishing, credential compromise, privilege escalation, lateral movement, and exposed services.
Strong analytical, documentation, and communication skills.

Senior Security Engineer

Key skills