Security Operations Engineer

🔥 14 minutes ago

🇪🇺 Europe – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 19%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

bridge351

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

🎯 Recruiter

🤝 B2B

Recruitment • B2B

Bridge351 is a Europe-focused recruitment firm that publishes and manages job openings for IT and technology roles. Its site shows active listings for positions such as Azure Cloud Engineer, Senior Java Backend Developer, Cybersecurity Project Manager, IT Recruiter and Business Manager, and provides candidate and employee portals (SSO) and career management via Teamtailor. The website emphasizes recruiting activity across multiple European locations (Lisbon, Porto, Poland, Luxembourg, Brussels, Denmark, Germany, Netherlands) and appears focused on hiring and placing technical talent for employers.

📋 Description

• Design and build SecOps tooling as part of the broader security tool ecosystem • Develop architecture patterns and solution designs for SIEM, SOAR, vulnerability detection and management, EDR, logging pipelines, and user behavior analytics • Evaluate and integrate new tools and platforms to strengthen detection, response, and automation • Build and maintain scalable data ingestion, correlation, and alerting workflows • Automate repetitive security operations tasks using playbooks, scripts, and workflows • Help shape a structured 24x7 security operations capability • Provide technical support during incidents, focusing on tooling, data quality, and engineering fixes • Improve detection content, correlation rules, dashboards, and data models based on real incident patterns • Support rapid instrumentation, log onboarding, and custom tooling during active security events • Develop, test, and operationalize new detection capabilities based on evolving threats and platform telemetry • Create and maintain detection-as-code artifacts, including Sigma, YARA, KQL, and static analysis rules • Validate detection quality through adversary simulation and purple-teaming • Keep rules documented, version-controlled, and validated against production data

🎯 Requirements

• 5+ years of experience in security operations, engineering, and cloud security tooling • Hands-on experience with SIEM/SOAR, EDR platforms, log ingestion, and telemetry pipelines • Scripting proficiency (Python, PowerShell, or Go) • Experience with infrastructure-as-code, CI/CD toolchains, and Kubernetes • Familiarity with threat modeling, detection engineering frameworks, TTP matrices, and MITRE ATT&CK • Experience creating architectural diagrams, interface specs, and onboarding guides • Experience with logging and detection for cloud architectures • Fluent English (C1 or above) • Experience with Wazuh • Familiarity with observability platforms / OpenTelemetry • Background as a SOC Analyst (Tier 1–3) or solid understanding of SOC operations • Knowledge of security frameworks (BSI, ISO 27001, MITRE ATT&CK, etc.) • Experience with GCP or another public cloud provider • DFIR / blue team certifications (CySA+, GIAC, GCIH, BTL) • Kubernetes security certification (CKS or CNCF-related)