Security Operations Engineer at Gridware enhancing security, detection, and response in cloud - first environments. Collaborating with IT and engineering teams to implement best practices.
About the role
- SOC Analyst responsible for monitoring security alerts and providing mitigation support. Collaborating with engineering teams to enhance security tools and products at Cloudflare.
Responsibilities
- Monitor and investigate proactive alerts to identify attacks
- Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation when applicable
- Work with Engineering and Product teams to improve products and tools
- Communicate with customers via chat, email, and phone
- Review alerts to determine relevancy and urgency; create tracking tickets for incidents requiring review or escalation
- Adhere to SOC SLAs for alert response and customer communication
- Configure and manage security monitoring rules; contribute to tool and threshold improvements
- DDoS mitigation for OSI Layers 3, 4, & 7: filter malicious traffic using Cloudflare tools including Magic Transit, Magic Firewall, Advanced TCP Protection, WAF, Custom Rules, IP Access Rules, and Rate Limiting
- Maintain customer-specific SOC runbooks and escalation matrices
- Support SOC customer onboarding and deliver monthly security reviews
Requirements
- Strong understanding of internet protocols (TCP, UDP, ICMP, GRE, BGP)
- Networking fundamentals are crucial for success
- Analysis of traffic for attack anomaly detection and creation of mitigation rules
- Experience handling attack mitigation with knowledge of L3/4 and L7 attacks
- Command line / Bash shell proficiency
- Customer Facing or Technical support experience is mandatory
- Ability to remain calm under pressure
- Ability to work 24x7 rotating shifts
- Sysadmin skills - Linux, Mac, or Windows (Preferred)
- Knowledge of Cloudflare Security Products & Features (Preferred)
- Scripting skills, Python preferred (Preferred)
- Prometheus/Grafana monitoring experience (Preferred)
- Packet capture tools such as tcpdump or Wireshark (Preferred)
- API/GraphQL experience (Nice to have)
- Foundational Certifications: BTL1, ISC2 CC, Network+, Security+, CCNA Security, or equivalent (Highly Valued)
- Advanced Certifications: GCIH, GCIA, CISSP, CCNP, or equivalent (Considered a Plus)
Benefits
- Flexible work arrangements
- Professional development
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Cybersecurity Operations Director leading cybersecurity managed services operations at a global accounting firm. Overseeing teams, driving growth, and serving as an advisor to clients.
L2 SOC Analyst managing security incidents and responses at Keyloop, focusing on digital transformation in the automotive sector.
Security Operations Analyst responsible for developing security processes and incident response. Collaborating with multiple teams for security best practices in a hybrid work environment.
Security Manager leading IAM and SecOps at fintech solutions provider in Brazil. Developing and implementing information security programs aligned with best practices and compliance requirements.
Security Engineer enhancing cybersecurity tools and solutions for The Walt Disney Company. Performing system analyses and developing security configurations for improved protection against cyber threats.
Security Operations Lead responsible for security operations aligning with policies and compliance. Handling incident response, vulnerability management, and supporting IT teams with security expertise.
SOC L2 Analyst responsible for security monitoring and incident investigation. Analyzing escalated alerts, conducting correlation with SIEM, and executing response actions.
Cyber Security Specialist protecting digital estate from threats at the University of Edinburgh. Focused on identifying and mitigating cyber risks while supporting teaching and research services.
Lead Specialist in Security Operations, enhancing detection engineering and incident response at Pearson. Collaborate with teams and drive process improvements in a high - paced environment.