Senior Information Security Operations Officer

Job description

The Senior Information Security Operations Officer safeguards corporate IT infrastructure, networks, enterprise data, and cloud environments against operational security risks and threats. This hands‑on role bridges infrastructure management with threat detection, incident response, IAM governance, and security standard compliance across enterprise systems. Key responsibilities include: configuring, managing, and auditing enterprise firewalls, VPNs, EDR agents, and web proxy controls; leading Tier‑2/Tier‑3 security event investigations, analyzing SIEM logs, and mitigating incidents; enforcing strict IAM, PAM, multi‑factor authentication, and role‑based access policies; directing vulnerability scans, prioritizing critical patches with infrastructure teams, and verifying system hardening; ensuring secure backup configurations, disaster recovery readiness, and adherence to ITIL, ISO 27001, and NCA‑ECC standards.

Requirements

• Minimum 6+ years of hands‑on experience in IT security administration, SOC engineering, or network security operations
• advanced proficiency with SIEM tools such as Splunk, QRadar, and Sentinel
• proficiency with EDR platforms like CrowdStrike and Defender
• proficiency with Next‑Gen firewalls such as Palo Alto and Fortinet
• deep knowledge of Identity & Access Management (Active Directory, Entra ID, PAM solutions) and multi‑factor authentication
• experience in threat detection, incident response, log analysis, and system hardening on Windows/Linux servers and cloud platforms Azure/AWS
• hold at least one active industry certification such as CompTIA Security+, CISSP, CEH, CCSP, or ITIL4.

Skills