Security Engineer III - Security Operations

Job description

The role focuses on protecting critical cloud infrastructure and strengthening security operations within a modern payments environment. As a Security Engineer III you own key detection and response capabilities, identify emerging threats, investigate incidents, and improve security coverage. You will build and optimize SIEM detections, automate response workflows, and develop reliable security tooling using Python and infrastructure-as-code practices. Working across cloud, compliance, and incident response, you help reduce operational risk and increase process efficiency.

Requirements

• hands-on experience in security operations and cloud-native threat detection
• proficiency in building, maintaining, and tuning SIEM detections, preferably Elastic
• practical experience securing AWS environments and implementing cloud-native detection and response
• proficient in Python for scripting, automation, and security tooling
• experience with Terraform or other infrastructure-as-code technologies
• working knowledge of the MITRE ATT&CK framework and its application to detection and investigation
• demonstrated experience triaging, investigating, and resolving security incidents
• strong written communication skills for documenting investigations, technical findings, and risk decisions
• ability to work independently, prioritize security issues, and own responsibilities
• willingness to participate in on-call rotation for monitoring and response
• nice to have experience with SOAR platforms or no-code automation tools
• familiarity with compliance frameworks such as PCI DSS, SOC 2, or ISO 27001
• experience in fintech, payments, or regulated industries.

Skills