Security Operations Engineer

About the role

The Security Operations Engineer will design, build, and maintain security controls, tooling, and automation across DeepHealth’s cloud and corporate environments. Reporting to the Director of Security Operations, the role ensures that security configurations are repeatable, version‑controlled, and auditable within a regulated healthcare setting.

Key responsibilities

• Build, configure, integrate and tune the enterprise security tooling stack across GCP, AWS and Azure.
• Develop and maintain detection content, correlation rules and response automation in the SIEM and SOAR platforms.
• Onboard new log sources, validate ingestion completeness and ensure proper field normalization.
• Administer endpoint detection and response tools, including policy configuration and coverage validation.
• Implement security automation and infrastructure‑as‑code using Terraform or equivalent frameworks.
• Support cloud security posture management, vulnerability management and incident response activities.

Required profile

• 4+ years of hands‑on security operations or engineering experience.
• Bachelor’s degree in IT, Computer Science, Cybersecurity or equivalent professional experience.
• 2+ years of cloud security experience with at least one major cloud provider (GCP, AWS preferred).
• 2+ years operating and tuning a SIEM platform.
• Experience administering Microsoft 365 and Entra ID security controls.

Required skills

• Google Cloud Platform, Amazon Web Services, Microsoft Azure
• SIEM and SOAR platforms
• Terraform (or similar IaC tools)
• Microsoft 365, Entra ID
• Kubernetes and container security
• Endpoint detection and response (EDR) tools
• Vulnerability management and secrets management solutions