Senior SecOps Engineer

Description

Papaya Global is a rapidly growing, award-winning B2B tech unicorn with a mission to revolutionize the payroll and payments industry. With over $400M raised from top-tier investors, our innovative technology provides a comprehensive solution for managing global workforces, from hiring and onboarding to managing and paying employees in over 160 countries.

We're looking for a talented and highly motivated Senior SecOps Engineer to join our team.

Key Responsibilities:

• Own the IT Security and Incident Response domains
• Monitor and respond to security events, vulnerabilities, and threats in our environment.
• Build and maintain our SIEM solution
• Conduct Incident Response (IR) activities, as well as managing, refining, and implementing the incident response process and procedures, ensuring readiness to respond to security incidents effectively.
• Conduct market research and proof of concept (POC) evaluations for security tools, ensuring the selection of effective solutions to enhance organizational security posture.
• Identify new security threats by conducting continuous monitoring, vulnerability assessments, and log analysis
• Provide on-call security support as needed

Requirements

• 5+ years of hands-on experience as a security engineer specializing in the IT security domain and incident response
• Proven experience with the solutions below:
• DLP
• Endpoint Protection - EDR XDR
• Email Protection
• SIEM
• Threat intelligence
• Vulnerability management solutions
• Attack simulation solutions
• Security automation or SOAR solutions
• In-depth knowledge of networking protocols and experience with securing network infrastructure, including firewalls and VPNs
• Experience with Azure Active Directory (AD) and Office 365 suite
• Solid understanding of system and security controls on Windows and MacOS
• Experience in triaging security alerts and executing incident response.
• Experience working at a high-growth startup or tech company.
• Passionate about security and well-informed on information, security principles and practices, cybersecurity trends, threats news, and best practices.

Nice to have