Senior Security Operations Engineer (Viator)

Senior Security Operations Engineer (Viator) AWS GCP Security Operations Incident Response SIEM As a Senior Security Operations Engineer at Viator, a Tripadvisor company, you will play a crucial role in advancing our security processes. Your responsibilities will span security operations, focusing on event data, incident response, tooling, and automation. You will collaborate closely with Developer Experience, SREs, and the Infrastructure team to promote security-conscious decisions. Responsibilities: Take ownership of security incidents, leading cross-functional teams to resolve issues and mitigate risks. Design and implement advanced SIEM solutions, ensuring integration with monitoring tools for robust event detection. Develop runbooks and playbooks to support complex incident types and cross-team collaboration. Facilitate tabletop exercises to improve incident response procedures. Oversee security monitoring implementation, ensuring tools align with best practices. Mentor junior engineers in threat intelligence, incident management, and security automation. Refine and drive the implementation of playbooks and runbooks for effective incident response. Identify operational bottlenecks and suggest improvements to reduce incident resolution time. Requirements: Experience in security operations, incident management, and SIEM tool configuration. In-depth experience with AWS and GCP. Proficiency in at least one programming language (Python, C#, Java, etc.). In-depth knowledge of advanced threat detection techniques, blue-team exercises, and incident response strategies. Experience in designing and implementing complex security monitoring solutions. Expertise in vulnerability assessments, threat hunting, and improving security processes. Excellent communication and collaboration skills. Ability to lead tabletop exercises and incident response drills. A proactive and results-driven mindset with a focus on continuous operational improvement. Nice to Have: Deep expertise with advanced SIEM platforms (e.g., Splunk, ArcSight, Wazuh). Experience with security automation tools (SOAR), threat intelligence platforms, and incident response orchestration. Familiarity with threat modeling, red-team/blue-team exercises, and advanced attack simulation techniques. Experience with cloud security and infrastructure monitoring (AWS, Azure, GCP). Knowledge of network traffic analysis, endpoint detection, and network forensics. Proficiency in scripting languages (e.g., Python, PowerShell, Bash) for automation. Experience in managing large-scale security operations and security project management. Competitive compensation packages, including base salary, annual bonus, and equity. Flexible work arrangements with a remote-first approach. Donation matching for charitable contributions. Tuition assistance for career development. Annual lifestyle benefit for personal use. Travel perks and employee discounts. Employee assistance program for support with life’s challenges. How to Apply Interested in this position? Please submit your resume and cover letter through the application portal. #J-18808-Ljbffr TripAdvisor