SecOps Engineer - Hibrido

EFFECTIVESOFT COSTA RICA SOCIEDAD ANONIMA - Heredia, Heredia

Descripción de la oferta

A convenir Contrato por tiempo indefinido Tiempo Completo Presencial y remoto

Key Responsibilities
Security Engineering
Design and implement secure systems, tools, and automation solutions.
Develop and refine detection logic, enhancing visibility and data integration.
Apply security reliability engineering principles and integrate threat intelligence with vulnerability management.
Governance and Compliance
Support and enforce policies aligned with the client’s security framework and compliance standards.
Assess, mitigate, and document information security risks in operations.
Manage compliance for new applications and acquisitions, ensuring seamless integration into the client’s technology infrastructure.
Security Platform Management
Administer and optimize core security platforms, including Google SecOps, Google Threat Intelligence, BindPlane, and DataDog.
Ensure platform availability, performance, and integrity through regular maintenance and upgrades.
Collect, process, and integrate telemetry and security data for improved monitoring to support Managed Services SOC.
Threat Detection and Incident Response
Work with SOC to develop and fine-tune detection rules and alerts to identify potential threats.
Monitor and investigate security incidents, escalating as needed.
Collaborate with Incident Response teams during security breaches and post-incident analysis.
Automation and Systems Integration
Automate workflows and incident responses using scripting (e.g., Python, PowerShell) and platform-native tools.
Integrate security platforms with technology systems (e.g., identity management, ticketing systems, cloud environments).
Manage security configurations using Infrastructure as Code (IaC) principles.
Security Best Practices
Enforce security best practices across systems and cloud environments.
Assist with vulnerability assessments, penetration testing, and audits, collaborating to remediate issues.
Contribute to policy, procedure, and standard development.
Reporting and Documentation
Generate reports on security posture, platform performance, and incidents.
Maintain detailed documentation of platform configurations, operational procedures, and incident playbooks.
Provide training on security tools and best practices to technology teams.
Required Skills and Experience
3–5+ years in Security Engineering, Security Operations, or a related hands-on role with a strong focus on applying engineering principles to security.
Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
Practical experience integrating new applications and acquisitions into existing IT infrastructures.
Familiarity with compliance frameworks (e.g., HITRUST, SOC 2, ISO 27001, GDPR).
Solid understanding of security architecture, system design, and cloud security principles (GCP, Azure, AWS).
Proficient in security tools and technologies, including SIEM, SOAR, EDR/XDR, NDR, firewalls, IDS/IPS, and cloud security platforms.
Hands-on experience with enterprise security platforms such as Google SecOps (Chronicle Security Operations), Google Cloud Platform Security Services, Google Threat Intelligence, BindPlane, and DataDog.
Experience developing and implementing detection rules and logic using platforms like YARA-L, case management systems, and automation playbooks.
Proficiency in scripting and automation languages such as Python, PowerShell, and Bash.
Skilled in SOAR platforms, automation frameworks, and telemetry data collection/processing for security applications.
Strong knowledge of modern cloud computing architectures (microservices, containers, serverless).
Understanding of networking protocols, operating systems (Linux, Windows), and common attack vectors.
Expertise in incident response processes, forensic investigations, and leveraging threat intelligence feeds for proactive defense.
Practical experience with data analysis, manipulation, and troubleshooting to address security challenges.
Strong written and verbal communication skills, with the ability to explain complex security concepts to both technical and non-technical audiences.
Effective collaboration skills with security analysts, developers, and cross-functional technology teams.
Ability to work independently, manage multiple priorities, and excel in a fast-paced environment.
Preferred Qualifications
Relevant industry certifications (e.g., CISSP, CSSLP, CompTIA Security+, Google Cloud Professional Cloud Security Engineer).
Experience in a marketing, advertising, or technology agency environment.
Experience with other security tools, such as EDRs, vulnerability scanners, or CASBs.
Familiarity with DevOps/DevSecOps practices.