Network Security Engineer

About the Role We are looking for a Network Security Engineer / Senior SOC Analyst to strengthen our Security Operations Center for a fast-growing IT organization with 700+ employees and a diverse technology landscape. Our environment includes: 400+ Linux systems, 200+ Windows machines, and 200+ macOS endpoints Development stack: Node.js, Ruby on Rails (RoR), Rust, Blockchain platforms Domains: Mobile applications, gaming platforms, FinTech systems Infrastructure: Multi-cloud (AWS, Azure, GCP) This role is ideal for professionals who thrive in complex, high-scale environments and can actively monitor, detect, investigate, and respond to security threats across infrastructure, endpoints, and applications. Key Responsibilities Monitor and analyze security alerts from SIEM, EDR, IDS/IPS, and cloud security tools Perform real-time threat detection, triage, and incident response across Linux, Windows, and macOS systems Investigate suspicious activities in multi-cloud environments (AWS, Azure, GCP) Conduct log analysis and correlation across infrastructure, applications, and network layers Manage and tune SIEM platforms (e.g., Splunk, LogRhythm, ELK) Handle incident lifecycle: detection → analysis → containment → remediation → reporting Perform endpoint and server-level investigations, especially on Linux-heavy environments Support threat hunting activities and identify advanced persistent threats (APTs) Perform vulnerability analysis and coordinate with engineering teams for remediation Assist in cloud security monitoring including IAM anomalies, misconfigurations, and suspicious activity Maintain incident response playbooks, SOPs, and documentation Generate security reports, dashboards, and metrics for leadership Support compliance requirements (ISO 27001, internal audits, security controls) Must-Have Qualifications 8+ years of experience in SOC, Security Operations, or Incident Response Strong experience in SIEM tools (Splunk, ELK, LogRhythm, QRadar) Hands-on experience with EDR/XDR tools (CrowdStrike, SentinelOne, Defender, etc.) Strong understanding of Linux security (critical), plus Windows and macOS environments Knowledge of networking concepts (TCP/IP, DNS, firewalls, VPNs) Experience in log analysis, threat detection, and incident triage Exposure to multi-cloud environments (AWS, Azure, or GCP) Familiarity with web/app security basics (Node.js, APIs, backend services) Understanding of common attack vectors (MITRE ATT&CK, OWASP Top 10) Experience with vulnerability management tools Basic scripting/automation using Python, Bash, or PowerShell Strong analytical and troubleshooting skills Preferred / Nice-to-Have Experience in FinTech, blockchain, or gaming environments Exposure to Rust-based systems and blockchain node security Familiarity with DevSecOps and CI/CD security monitoring Experience with threat intelligence platforms Knowledge of container security / Kubernetes Certifications such as Security+, CEH, CySA+, CISSP (or pursuing)