security engineer in cloud security operations

The company supports critical security operations within a cloud-based enterprise environment.

• Manage day-to-day SOC operations, including security event monitoring, alert investigation, and incident triage
• Monitor, investigate, and respond to endpoint security alerts using SentinelOne Singularity Complete
• Maintain and optimize SIEM infrastructure, including log collection, ingestion, correlation, and alerting
• Support Wazuh and TheHive to ensure effective threat detection and incident tracking
• Oversee security instrumentation and ensure appropriate visibility across AWS cloud infrastructure, endpoints, and enterprise systems
• Investigate suspicious activity, identify potential security threats, and escalate critical incidents when necessary
• Support incident response workflows and coordinate with external forensic and incident response partners during major security events
• Manage and troubleshoot security integrations across AWS, Okta, SentinelOne, and Cisco Umbrella
• Evaluate security monitoring processes and recommend improvements to detection, alerting, and operational efficiency
• Maintain documentation of security incidents, investigations, monitoring procedures, and operational processes
• Work independently and collaborate with distributed technical teams across multiple time zones
• Build monitoring and alerting scripts
• Support response and investigation when serious incidents arise

• Experience configuring and operating security tooling
• Experience in a SOC role, with a strong focus on monitoring, alerting, and incident response
• Working knowledge of AWS cloud engineering workflows
• Working knowledge of modern CI/CD and GitHub

• Contract position
• Working hours: 8–5 PM Estonia time
• 2–3 Openings