HQ - Lead Information Security Engineer

5+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role.

Previous experience leading or managing a security team, including mentoring engineers, setting priorities, and coordinating workloads. Experience managing a team of a similar size is a plus.

At least 3 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management.

At least 2 years of experience working with CSPM tools.

At least 3 years of experience working for a cloud-based, global technology product company.

Hands-on experience with EDR/XDR tools and endpoint investigation.

Experience with vulnerability management and risk-based prioritization.

Strong understanding of cloud security principles and experience working with AWS, Azure, and/or Google Cloud Platform.

Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members.

Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.

Team Leadership and Management: Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance.

SecOps and Threat Detection: Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents.

Detection and Response: Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security.

Security Policies and Standards: Develop security guides and define, implement, and monitor security measures to protect Job&Talent's systems, data, and operations.

Security Tooling and Processes: Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business.

Cloud Security: Use our Cloud Security Posture Management (CSPM) tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform.

Cross-functional Collaboration: Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines.

Risk Management: Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively.

Logging and Visibility: Improve logging, monitoring, visibility, and evidence collection across corporate and production systems.

Continuous Improvement: Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats.