DevSecOps Engineer

Remote - European Region

Hybrid

Mid Level

Full Time

DevSecOpsSecurity OperationsSIEMEDRXDRDLPIncident ResponseVulnerability ManagementRemote

Requirements

•Experience working with SIEM platforms: writing and tuning detection rules, log ingestion, and investigation workflows
•Experience working in a Security Operations Center (SOC) environment
•Strong experience with EDR/XDR solutions: alert triage, investigation, scoping, and remediation of incidents
•Experience with Data Loss Prevention (DLP) technologies and their operational use
•Practical experience in triaging security alerts, identifying false positives, escalating or resolving real threats
•Involvement in end-to-end incident response: detection, analysis, containment, eradication, and recovery
•Understanding of incident response processes and ability to follow or improve playbooks
•Experience with vulnerability management: scanning, prioritization, and coordination of remediation efforts
•Ability to read and analyze logs from various systems

•Monitor security alerts from different systems, triage and investigate potential threats
•Perform end-to-end incident response: detection, analysis, containment, eradication, and recovery
•Identify false positives, escalate real threats, and provide actionable remediation guidance
•Analyze logs from multiple systems (OS, applications, network, cloud) to support investigations
•Collaborate with DevOps, IT, and development teams to remediate vulnerabilities and misconfigurations
•Participate in vulnerability management activities: scanning, prioritization, coordination with relevant teams
•Follow and contribute to improvement of SOC playbooks and standard operating procedures
•Provide documentation and reporting for incidents, investigations, and security events
•Stay updated on emerging threats, vulnerabilities, and security technologies