Cyber Operations Engineer – IR

Softcard (acquired by Google)

. Work across cloud security, Identity and Access Management (IAM), infrastructure protection, cyber recovery, Disaster Recovery (DR) engineering, application security, DevSecOps, security tooling and automation, and data loss prevention .

Posted 10/30/2026full-timeBirmingham • Alabama • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Defense Engineering, focusing on Cloud Security, Identity and Access Management (IAM), and Disaster Recovery (DR). Proficient in threat hunting, incident response, and operationalizing threat intelligence to enhance security measures.

Highest-signal resume keywords

Cyber Defense EngineeringThreat HuntingSIEM PlatformsIncident ResponseDisaster Recovery

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityIdentity And Access Management (IAM)Cyber RecoveryApplication SecurityDevSecOpsSecurity ToolingData Loss PreventionLog Data AnalysisTechnical Asset ManagementContent Filtering

Soft Skills

Analytical SkillsInvestigative SkillsTeam Collaboration

Tools & Technologies

SIEM PlatformsEDRThreat Intelligence FeedsOperational Technology Recovery Procedures

Certifications & Qualifications

Relevant Certifications

Industry Keywords

CybersecurityDisaster Recovery TestingStandard Operating Procedures (SOPs)Security Operations Center Monitoring

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Work across cloud security, Identity and Access Management (IAM), infrastructure protection, cyber recovery, Disaster Recovery (DR) engineering, application security, DevSecOps, security tooling and automation, and data loss prevention
Execute day-to-day Cyber Defense Engineering activities within the assigned domain
Support proactive threat hunting activities by forming hypotheses and investigating anomalies across the environment
Consume and operationalize threat intelligence feeds, translating findings into hunting priorities and detection improvements
Participate in security operations center monitoring, incident response, and insider risk investigations as part of shared team coverage
Support cyber recovery execution and managed service oversight as needed
Document and maintain findings, Standard Operating Procedures (SOPs), and playbooks for threat hunting and detection processes
Participate in the security on-call rotation as needed
Support cyber recovery activities, including operational technology recovery procedures and disaster recovery testing exercises
Perform other duties as assigned

Requirements

What you’ll need

Typically requires a bachelor’s degree in computer science, software engineering, or a related field and three (3) to five (5) years of related experience or equivalent experience
Relevant certifications
Experience with relevant platforms and testing methodologies
Experience operating SIEM platforms and analyzing log data
Experience with EDR, content filtering, and/or other security toolsets
Experience with cyber asset monitoring and technical asset management tools
Strong analytical and investigative skills
Comfortable operating in a shared-coverage, lean team environment

Benefits

Comp & perks

Healthcare coverage options
401(k)
Tuition reimbursement
Vacation pay
Sick pay
Holiday pay