SecOps Engineer

About the role

The SecOps Engineer is responsible for day‑to‑day monitoring, investigation and operational response to cybersecurity events across the organisation’s technology environment. Working closely with Security Engineers, IT Operations and Cloud teams, the role provides the operational security capability required to protect corporate, cloud, gaming, retail and digital environments.

Key responsibilities

• Perform daily security monitoring using Microsoft Sentinel, Microsoft Defender XDR and other platforms, investigate alerts and maintain accurate operation records.
• Support incident response activities, including containment, escalation, evidence gathering and post‑incident reviews.
• Monitor and investigate Data Loss Prevention alerts, manage evidence and improve DLP controls.
• Conduct vulnerability scanning, review threat intelligence and coordinate remediation with system owners.
• Monitor identity, endpoint and cloud security events across Microsoft Entra ID, Defender for Endpoint, Azure, AWS, GCP and Cloudflare.
• Assist with security awareness initiatives, phishing simulations and provide practical guidance to employees.
• Maintain audit evidence, support ISO/IEC 27001 audit preparation and track corrective actions.
• Participate in on‑call rotations for critical security incidents, ransomware events and major vulnerabilities.

Required profile

• Degree, diploma or equivalent qualification in Cyber Security, Information Security, Computer Science or related field.
• 2–4 years of experience in security operations, incident response, vulnerability management or related technical environment.
• Hands‑on experience with SIEM/XDR and endpoint protection technologies.
• Understanding of cyber incident response, identity security and vulnerability management processes.
• Familiarity with Microsoft cloud and security services; experience in regulated sectors (gaming, financial services) is a plus.

Required skills

• Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender for Endpoint.
• Microsoft Entra ID, Microsoft Intune, Microsoft Purview (DLP).
• Tenable Nessus, Tenable Web Application Scanning.
• Shodan, Cloudflare security and monitoring services.
• Experience with AWS, GCP and Azure cloud environments.