Back to jobs

Senior Information Security Engineer - Product & Customer Organization

Ultimo
Colombo, Western Province, Sri Lanka
Full-time
You apply on Ultimo's own careers site

This security operations role monitors cloud security, investigates incidents, and helps improve threat detection and response. You will maintain security tools, advise on threats and vulnerabilities, and contribute to AI security practices within the Cloud SOC team.

Full-time
Hybrid
3+ years
Degree in Information Security, Computer Science, or Informa

Skills & Expertise

Cloud security
Security operations
SIEM
XDR
Threat modeling
MITRE framework
Amazon Web Services
Microsoft Azure

Key Responsibilities

Monitor cloud security events, triage incidents, and investigate information security issues.

Maintain security operations tools and develop threat containment and mitigation use cases.

Identify security gaps and help improve team processes, dashboards, training, and documentation.

Full Description

Job Description

Essential Duties and Responsibilities

• Responsible for monitoring the Cloud security state.

• Analyze real time events and triage incidents based on the severity of the situation

• Identify/gather required data to execute investigations into information security incidents and investigations

• Identify and support improving reverent information security gaps.

• Administrate & maintain security operation tools and services

• Perform threat identification, modeling, management and develop use cases for containment and mitigation of threat vectors.

• Maintain keen understanding and provide adequate security advisory on threats and vulnerabilities.

• Inculcating AI security practices within the Cloud SOC team

• Contribute to improving departmental processes, procedures, internal training, and documentation.

• Create or contribute to improving internal dashboards, reports, and metrics.

• Any other duties as designated by the line manager.

Overall Required Competencies

• Strong knowledge of Information Security and Security Operations.

• Strong knowledge of Cloud infrastructure and services.

• ITSM knowledge will be an added advantage.

• An ability to build strong relationships with internal teams, and senior leadership is essential

Qualifications

Essential: A degree in Information Security, Computer Science, or Information Technology with 3+ years of experience in security operations or information security role in the industry

Desirable:

• Knowledge of SIEM, XDR, cloud security threats and key Information security principles, compliance and best practices.

• Understanding in MITRE framework

• One or combination of: CEH / ECSA / Security+ or other similar qualification.

• Any cloud security specific certification or other qualifications is an added advantage.

• Previous experience on any of cloud providers (Amazon Web Services, Microsoft Azure, Google Cloud)

• Knowledge of AI security concepts and AI-driven security operations

• ITIL is an added advantage

Additional Information

We embrace flexibility and hybrid work opportunities to support diverse needs and lifestyles, while also valuing inclusive workplace experiences. By fostering a sense of community, we drive innovation, strengthen connections, and nurture belonging. Our commitment ensures you can work in a way that suits you best, while also engaging with colleagues to share ideas and build meaningful relationships.

Applications are handled on Ultimo's site