Intermediate SecOps Engineer
TLDR
Strengthen detection and response across distributed open-source infrastructure, blending incident response with threat hunting to improve security visibility across cloud, identity, and applications.
- Develop, maintain, and improve security monitoring systems, including SIEM rules, alerts, dashboards, and detection workflows across infrastructure, cloud, and identity systems.
- Participate in incident response activities including triage, investigation, containment, remediation, and post-incident reviews to ensure continuous improvement.
- Proactively conduct threat hunting and security investigations to identify anomalous behavior and emerging risks within systems and services.
- Operate and enhance security tooling such as SIEM platforms, log aggregation systems, vulnerability management tools, and alerting pipelines.
- Create and maintain incident response playbooks, operational runbooks, and security documentation to standardize response procedures across teams.
- Collaborate with infrastructure and engineering teams to identify vulnerabilities and implement security hardening across Linux, cloud, container, and network environments.
- Contribute to disaster recovery planning, resilience testing, and on-call security support as part of operational readiness.
- 3–5+ years of experience in SecOps, incident response, infrastructure security, or related operational security roles.
- Hands-on experience with security monitoring, alert triage, incident investigation, and response workflows in production environments.
- Strong understanding of Linux systems, networking fundamentals, IAM, and common attack techniques.
- Experience working with SIEM tools, log aggregation platforms, and detection engineering processes.
- Familiarity with cloud environments (AWS, Azure, or GCP) and containerized systems such as Docker and Kubernetes (or OpenShift/OKD).
- Ability to write and maintain runbooks, detection rules, and incident response documentation.
- Working knowledge of security frameworks such as MITRE ATT&CK or CIS Controls.
- Strong analytical and problem-solving skills with the ability to perform under pressure during security incidents.
- Excellent communication skills to clearly explain technical risks and incidents to both technical and non-technical stakeholders.
- Certifications such as Security+, CEH, or cloud security credentials are considered an asset.
- Competitive salary package of approximately €50,000 – €75,000 annually.
- Fully remote work arrangement with preference for candidates based in Canada or the European Union.
- Opportunity to work on globally used open source infrastructure with high-impact security responsibilities.
- Exposure to large-scale distributed systems, cloud environments, and modern security tooling.
- Collaborative and mission-driven engineering culture focused on innovation and operational excellence.
- Strong emphasis on learning, professional development, and continuous improvement.
- Inclusive and flexible work environment supporting remote collaboration across global teams.
Requirements:
Benefits:
Benefits
Learning Budget
Strong emphasis on learning, professional development, and continuous improvement.
Collaborative, mission-driven culture
Collaborative and mission-driven engineering culture focused on innovation and operational excellence.
Remote-Friendly
Inclusive and flexible work environment supporting remote collaboration across global teams.
Jobgether runs the largest remote job platform, effectively linking job seekers with over 200,000 flexible and remote opportunities that match their unique skills and preferences. Our focus is on enhancing the hiring process, ensuring efficiency while prioritizing the candidate experience, particularly in the growing health and wellness sector.
- Founded
- Founded 2020
- Employees
- 11-50 employees
- Industry
- Professional Services