Security Engineer

• Administer and fine-tune Microsoft Sentinel (SIEM), including rule creation, use-case development, and incident triage
• Manage and optimize Elastic Stack (Elasticsearch/ELK) for log ingestion, indexing, and security analytics
• Configure, maintain, and troubleshoot enterprise firewalls (rule management, policy hardening, traffic analysis)
• Operate and tune EDR (Endpoint Detection & Response) solutions for threat detection and incident response
• Collaborate with SOC/IT teams to ensure compliance with banking regulatory and security standards

Must Have:

• Proven hands-on experience with Microsoft Sentinel (or equivalent SIEM)
• Strong working knowledge of Elastic/ELK Stack administration
• Solid experience configuring and managing firewalls (e.g., Palo Alto, Fortinet, Check Point)
• Practical experience with EDR platforms (e.g., CrowdStrike, Defender for Endpoint, SentinelOne)
• Solid Linux administration knowledge
• Understanding of cloud environments and cloud security concepts (e.g., Azure, AWS, or GCP)
• Regular use of AI tools to improve productivity, automate or reduce repetitive work, support decision-making, and deliver higher-quality outcomes.
• Ability to use AI tools responsibly by structuring effective prompts, critically validating outputs, understanding limitations, and taking ownership of the final result.

Nice to Have:

• Understanding of banking/financial sector security and compliance requirements
• Relevant certifications (e.g., Security+, CySA+, SC-200, or vendor-specific)