Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 3 days ago

Senior Engineer - IT Security

InTalent Asia784 open roles

Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Engineer - IT SecurityInTalent Asia

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on InTalent Asia's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. InTalent Asia postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: first seen 3 days ago

InTalent Asia median: 1 days open

The posting

WE ARE HIRING: Senior Security Operations Engineer

Location: Colombo, Sri Lanka Employment Type: Full Time Industry: Banking & Financial Services

Role Overview

We are seeking a highly skilled and proactive Senior Security Operations Engineer to join a leading cybersecurity and IT Security & Compliance function. The successful candidate will be responsible for strengthening security monitoring, threat detection, incident response, security automation, and advanced threat hunting capabilities while supporting the organization's cyber resilience strategy. This role requires a cybersecurity professional with strong expertise in SIEM, XDR, SOAR, detection engineering, threat intelligence, incident response, and security operations. The ideal candidate will play a key role in designing advanced detection capabilities, enhancing security automation, and supporting the continuous evolution of enterprise cyber defense mechanisms.

Key Responsibilities

Security Operations & Detection Engineering

  • Lead the design, development, and maintenance of advanced security detection and response frameworks across enterprise environments.
  • Develop, tune, and optimize advanced SIEM and XDR detection logic to identify sophisticated cyber threats and attacker tactics.
  • Create custom correlation rules, use cases, analytics, and detection mechanisms beyond traditional signature-based techniques.
  • Continuously improve security visibility by enhancing detection coverage across the enterprise threat landscape.
  • Ensure security monitoring solutions remain effective, scalable, and aligned with emerging threats.

Security Automation & SOAR Engineering

  • Serve as the lead architect for security automation initiatives across the Security Operations ecosystem.
  • Design and implement end-to-end SOAR playbooks and orchestration workflows to automate security response activities.
  • Reduce Mean Time to Respond (MTTR) through automated investigation, enrichment, triage, and response processes.
  • Integrate security technologies and tools to streamline operational efficiency across the SOC environment.
  • Develop custom scripts and automation solutions to eliminate repetitive manual security tasks.

Threat Hunting & Incident Response

  • Lead proactive, hypothesis-based threat hunting exercises to identify malicious activity that may evade traditional detection methods.
  • Conduct deep-dive forensic investigations and root cause analysis for significant security incidents.
  • Act as the senior technical escalation point for critical cybersecurity incidents.
  • Identify attacker behaviours, techniques, and indicators of compromise across enterprise environments.
  • Develop advanced defensive capabilities based on threat intelligence and investigation findings.

Purple Teaming & Security Improvement

  • Collaborate closely with Red Teams to execute Purple Teaming exercises.
  • Translate offensive security findings into practical defensive detections and automated controls.
  • Validate and enhance monitoring capabilities against evolving adversary tactics and threat scenarios.
  • Support continuous improvement initiatives that strengthen organizational cyber defense capabilities.

Platform Management & Optimization

  • Oversee onboarding, normalization, and integration of new log sources into security monitoring systems.
  • Ensure optimal performance and effectiveness of SIEM, SOAR, XDR, and EDR platforms.
  • Monitor security platform health and recommend enhancements to improve operational effectiveness.
  • Support log management, data quality, and security telemetry optimization initiatives.

Governance, Reporting & Stakeholder Engagement

  • Prepare detailed technical documentation, operational procedures, and security reports.
  • Lead post-incident reviews and "lessons learned" sessions to improve detection and response capabilities.
  • Translate technical security findings into business risks and actionable recommendations for management.
  • Work closely with infrastructure, application, and business teams to drive security control implementation and remediation activities.
  • Provide technical guidance and mentoring to SOC analysts and security team members.

Candidate Profile

  • Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or a related discipline.
  • Minimum 3–5 years of experience in Information Security.
  • At least 3 years of experience in advanced SIEM/XDR administration, Detection Engineering, Threat Hunting, or SOC Tier 2/Tier 3 operations.
  • Strong expertise in designing, implementing, and optimizing SIEM, XDR, SOAR, and EDR platforms.
  • Proven experience developing custom detection logic, advanced analytics, and correlation rules.
  • Hands-on experience with security automation, orchestration, and response engineering.
  • Advanced proficiency in Python, PowerShell, Bash, or similar scripting languages.
  • Strong understanding of Windows and Linux operating environments.
  • Strong knowledge of network and application protocols including TCP/IP, HTTP, HTTPS, TLS, SSH, DNS, and related technologies.
  • Deep understanding of the MITRE ATT&CK Framework and MITRE D3FEND methodologies.
  • Experience with digital forensics, incident response, threat hunting, and vulnerability management.
  • Strong analytical skills and ability to solve complex cybersecurity challenges under pressure.
  • Excellent communication skills with the ability to present technical concepts to both technical and non-technical stakeholders.
  • Strong stakeholder management and collaboration capabilities.

Professional Certifications

  • CEH (Certified Ethical Hacker)
  • CHFI (Computer Hacking Forensic Investigator)
  • CySA+
  • CSXP
  • SSCP
  • Other relevant cybersecurity certifications will be considered an advantage.

Ready to take your career to new heights?

We're InTalent Asia, your go-to recruitment partner in Sri Lanka, and we've got an exciting opportunity for you!

Our client is looking for a skilled individual to fill the role of Senior Security Operations Engineer.

Apply now and see how you can be the perfect fit for this exclusive position!

#InTalentAsia #CareerOpportunity #JobVacancy #CyberSecurity #SecurityOperations #SIEM #SOAR #ThreatHunting #DetectionEngineering #IncidentResponse #InformationSecurity #CareerGrowth

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against InTalent Asia's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on InTalent Asia's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    InTalent Asia's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.