FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Security Operations Engineer
UPGREAT AG. Ensure the secure and stable operation, monitoring, and continuous improvement of tooling, security services, and customer environments .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in SecOps and incident response, with a strong focus on vulnerability management and security service delivery. Proficient in automation and scripting to enhance operational efficiency and reduce response times.
Highest-signal resume keywords
SecOps ExperienceIncident Response ManagementMicrosoft Defender XDRKQL ProficiencyVulnerability Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident ResponseVulnerability ManagementSecurity EngineeringThreat HuntingAutomation with PowerShellMicrosoft Graph APIPython ProgrammingSIEM SolutionsSOAR SolutionsDetection Use Case Development
Soft Skills
Calm ApproachMethodical Problem SolvingSolution-Oriented Mindset
Tools & Technologies
Microsoft SentinelEntra IDLogic AppsSecurity Services ToolsCustomer Environment Management
Certifications & Qualifications
SC-200SC-300AZ-500Security+GIAC
Industry Keywords
Managed Security ProviderCustomer-Facing EnvironmentMean Time To DetectMean Time To RespondSecurity Baseline Assessments
Tech Stack
Tools & technologiesCloudPython
About the role
Key responsibilities & impact- Ensure the secure and stable operation, monitoring, and continuous improvement of tooling, security services, and customer environments
- Manage security events, incidents, and findings end-to-end—from triage and analysis through containment and customer communication to post-incident reviews and documentation
- Develop and optimize detection use cases, playbooks, and automations
- Identify and sustainably reduce false positives
- Manage vulnerability and patch management across multiple customer environments
- Prioritize measures based on exposure, exploitability, and risk, particularly for critical vulnerabilities and zero-day exploits
- Deliver approximately 50% billable security services directly at customer sites
- Conduct onboarding, security baseline assessments, reviews, reporting, and provide expert customer advice
- Collaborate with Operations, Engineering, KAM, the CISO, and external security partners
- Ensure reliable and continuous operations through mutual backup coverage
- Reduce mean time to detect and mean time to respond (MTTD/MTTR)
- Increase detection coverage and standardize and scale security services
- Develop tools and scripts to simplify or automate manual processes
Requirements
What you’ll need- Completed education in computer science (EFZ/HF/University of Applied Sciences) or equivalent practical experience in systems, cloud, or security engineering
- At least three years of experience in SecOps, SOC/MDR, incident response, or security engineering
- Experience in an MSP or customer-facing environment is preferred
- Extensive hands-on experience with Microsoft Defender XDR, Microsoft Sentinel, and Entra ID
- Proficient in KQL for threat hunting and developing analytics rules
- Experience in incident response, EDR/XDR, vulnerability management, structured case handling, and accurate ticket documentation
- Experience automating recurring tasks with PowerShell
- Knowledge of Python, the Microsoft Graph API, Logic Apps, and SIEM/SOAR solutions is an advantage
- Holistic understanding of the interrelationships between identities, endpoints, networks, cloud, backup, applications, and operational processes
- Calm, methodical, and solution-oriented approach to technical challenges
- Strong German communication skills
- Good command of English
- Willingness to continuously develop your security expertise
- Certifications such as SC-200, SC-300, AZ-500, Security+, or GIAC are welcome
Benefits
Comp & perks- Permanent employment contract
- 20 days of annual leave
- Modern office premises with ergonomically equipped workstations
- 55% of the occupational pension contribution covered by the employer
- Premiums for daily sickness benefits insurance covered by the employer
- Support for professional development and further training
- Free parking
- Birthday gift
- Special rates at fitness centers and with other partners
- Support for obtaining the SC-200 certification within twelve months
- Hybrid working with four days per week on-site