Security Operations Engineer | Energy Trading & Infrastructure Firm

About the role

Oversee the quality of investigations and closures performed by a 24/7 offshore SOC, while handling routine incidents and escalating cases with clear evidence and recommended next steps. Tune and document detections, conduct threat hunts, automate investigation workflows, and contribute to security engineering projects and post-incident improvements. Requires 3–6 years of hands-on experience in security operations, incident response, detection engineering, or threat hunting, including investigations from triage through closure. Candidates should have practical SIEM and EDR/XDR experience, be able to query telemetry using KQL or an equivalent language, and communicate effectively with technical and business stakeholders; SC-200, GCIH, or CrowdStrike certifications and AWS or Azure incident experience are preferred.