Senior Security Operations Engineer

About the role

We are a rapidly scaling digital goods company seeking our first Security Operations hire. You will own threat detection and incident response end‑to‑end, shaping the function from the ground up.

Key responsibilities

• Design, build and operate detection and response capabilities across cloud, identity, endpoint and SaaS environments.
• Create security data pipelines, ingesting logs into a SIEM or data lake, normalising and monitoring pipeline health.
• Select, deploy and tune SIEM, EDR, cloud threat detection and automation tools to achieve high signal‑to‑noise alerts.
• Write detections as code, map to MITRE ATT&CK, measure coverage and focus on high‑risk areas.
• Lead incident response, act as incident commander, coordinate containment and recovery, and run blameless post‑incident reviews.

Required profile

• 5+ years in security operations, detection engineering or incident response, preferably in a startup or scale‑up.
• Hands‑on experience building detections and investigating incidents in AWS using CloudTrail, GuardDuty, VPC Flow Logs and Kubernetes audit logs.
• Demonstrated leadership in at least one domain such as detection engineering, incident response, SIEM architecture, security automation or threat hunting.
• Ability to communicate clearly under pressure and translate technical findings for diverse stakeholders.

Required skills

• Python
• SQL or SIEM query language
• AWS services (CloudTrail, GuardDuty, VPC Flow Logs)
• Kubernetes audit logs
• SIEM, EDR, SOAR tooling

What we offer

• Immediate, large‑scale impact on a high‑growth business
• Top‑of‑the‑market compensation packages
• Collaboration with top regional talent from companies like Talabat, Careem, Etisalat