Security Engineer – Security Operations & Production

About the role

We are seeking a mid-level Security Engineer to join Realtime’s security team. The role bridges security operations, detection engineering, incident response and production readiness, helping to keep our cloud and identity environments secure and observable.

Key responsibilities

• Monitor and triage alerts across Microsoft Defender, Sentinel, Huntress/MDR, Wiz, Datadog, Jira and Slack, validating severity and coordinating response.
• Develop, tune and maintain detection logic using KQL and related tools to reduce false positives.
• Assist with incident response for endpoint, identity, cloud and email events, managing containment actions and evidence collection.
• Maintain and improve runbooks, dashboards, and automation workflows using Logic Apps, playbooks and webhooks.
• Collaborate with managed SOC/MDR partners and internal teams to ensure day‑2 operational readiness.

Required profile

• Hands‑on experience in a Security Operations Center (SOC) environment.
• Comfortable wearing multiple hats in a small, fast‑moving team.
• Strong analytical skills and attention to detail when handling security alerts.

Required skills

• Microsoft Defender
• Microsoft Sentinel
• Huntress (or similar MDR platform)
• Wiz
• Datadog
• Jira and Slack
• Kusto Query Language (KQL)
• Azure Logic Apps
• SOAR automation concepts (playbooks, webhooks)