Security Operations Engineer (Cybersecurity)

Location: Remote; applications accepted only from Germany, Armenia, France, or the UK.

Company

A software company providing a shared 2D/3D collaboration environment for architects, engineers, contractors, and owners working on complex construction and infrastructure projects.

What you will do

• Monitor, triage, investigate, and respond to security alerts across cloud, endpoint, identity, and SaaS environments.
• Lead incident response through containment, eradication, recovery, root-cause analysis, and post-incident reporting.
• Develop, test, and optimize detection rules aligned with the MITRE ATT&CK framework.
• Conduct proactive threat hunting across cloud, endpoint, and identity telemetry.
• Analyze and correlate logs from AWS, Microsoft Azure/Entra ID, Kubernetes, endpoints, and SaaS applications.
• Improve security logging, detection coverage, vulnerability remediation, runbooks, and escalation procedures.

Requirements

• At least 3 years of hands-on experience in a SOC, incident response, or security detection role.
• Practical experience with SIEM and EDR platforms; Microsoft Sentinel and CrowdStrike Falcon are preferred.
• Ability to write, analyze, optimize, and tune detection queries using KQL or similar query languages.
• Strong understanding of cyberattack techniques, threat behaviors, MITRE ATT&CK, AWS and Azure security, and end-to-end incident response.
• Knowledge of ISO 27001, NIST, CIS, and SOC 2 frameworks and standards.
• Upper-intermediate English (B2) or higher is required, both written and spoken.

Nice to have

• Experience with proactive threat hunting and Kubernetes or container security.
• Basic scripting skills in Python, PowerShell, or Bash.
• Relevant certifications such as GCIH, GCIA, GCFA, GCTI, Microsoft SC-200, or CrowdStrike CCFA/CCFH.

Culture & Benefits

• Flexible, employee-focused work culture.
• Innovative and collaborative environment.
• Company-wide trips, including events in Armenia and Switzerland.
• Working conditions designed to support effective work.