Security Operations Engineer (SOC + Offensive)

About the role

We are looking for a Security Operations Engineer who will own both SOC operations and offensive security testing for our customers. The role combines incident response leadership with hands‑on penetration testing to keep client environments secure.

Key responsibilities

• Own end‑to‑end SOC and incident response across customers, define detection strategy, coordinate operations, refine playbooks, and automate processes.
• Conduct penetration testing engagements, using manual depth and automated tools to uncover risks.
• Act as trusted technical advisor for customers, explain findings, prioritize remediation and ensure fixes are applied.
• Collaborate with engineering to enhance scanning capabilities (vulnerability scanning, CSPM, SAST, DAST, SBOM) across infrastructure, cloud and code.
• Continuously improve detection logic and response workflows in partnership with the product team.

Required profile

• Strong client‑facing communication skills, able to explain complex security concepts clearly.
• Minimum 3 years experience in security operations, SOC or incident response environments.
• Proven ability to manage the full detection‑response lifecycle: triage, investigation, containment and coordination.
• Practical penetration testing experience with a clear path to OSCP or equivalent offensive certification.

Required skills

• SOC operations
• Incident response
• Penetration testing (manual and automated)
• OSCP certification (or equivalent)
• Vulnerability scanning
• Cloud security posture management (CSPM)
• Static and dynamic application security testing (SAST, DAST)
• Software Bill of Materials (SBOM)