{"id":2812329,"url":"https://alion.io/job/digital-zone-senior-security-operations-engineer","title":"Senior Security Operations Engineer","company":{"id":9375,"name":"Digital Zone","domain":"dz.iq","url":"https://alion.io/company/digital-zone","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["AE","PL","RO"],"hiring_countries_total":3,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":84000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Commander.js","optional":false},{"name":"Kubernetes","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false},{"name":"ISO 27001","optional":true},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-18T10:05:59Z","employer_posted_date":"2026-10-18","last_verified_at":"2026-10-20T05:04:10Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About the Role\nWe’re a rapidly scaling digital goods company, and security operations is a function you’ll shape, not just run. As our first Security Operations hire, you’ll own threat detection and incident response from start to finish: what we log, what we alert on, and how we respond when something happens. You’ll work closely with engineering and our Product Security function to protect our cloud-native platform, and you’ll improve our ability to spot and contain threats in ways we can measure. This is a high-impact role with plenty of autonomy. It suits someone who enjoys building security operations from first principles in a modern, fast-moving environment.\nWhat You’ll Do\nBuild and run core detection and response capabilities: Design and operate our security operations across cloud, identity, endpoint and SaaS, from threat detection and threat hunting through to incident response.\nBuild security data pipelines: Design and build the pipelines that bring logs from cloud, identity, endpoint and SaaS sources into our SIEM or security data lake. Normalize and enrich the data at ingestion, monitor pipeline health so a broken log source is caught quickly, and balance coverage against cost and retention requirements.\nOwn our security operations tooling: Select, deploy, configure and tune the SIEM, EDR, cloud threat detection and automation tooling so it raises alerts with a high signal to noise ratio.\nBuild detections that matter: Write detections as code, map them to MITRE ATT&CK and base them on how attackers would realistically target our environment. Measure and test coverage, and focus effort where the risk is highest.\nLead incident response: Own the incident response plan and playbooks. Act as incident commander for security events and coordinate containment and recovery across engineering, legal and leadership. Run blameless PIRs that leave us stronger.\nRequirements\nSenior experience: Typically 5+ years in security operations, detection engineering or incident response, with hands-on experience building things yourself. A startup or scale-up background is a strong plus.\nCloud detection and response ownership: You’ve built detections and investigated incidents in AWS, using sources like CloudTrail, GuardDuty, VPC Flow Logs and Kubernetes audit logs.\nDepth in key security operations domains: You’re comfortable taking the lead in at least one (ideally several) of these:\nDetection engineering and detection-as-code\nIncident response and cloud forensics\nSIEM and security data pipeline architecture\nSecurity automation (SOAR) and alert triage workflows\nThreat hunting and threat intelligence\nEngineering mindset: You write code (Python, SQL or your SIEM’s query language), treat detections and runbooks like software, and automate repetitive work so people can focus on judgment calls. \nCalm, clear communication under pressure: You can run an incident and keep stakeholders informed while it’s happening. You can turn technical findings into statements of impact and next steps for engineers, leadership, non-technical colleagues and, when needed, customers.\nNice to Have\nExperience building the incident response and logging controls needed for SOC 2, ISO 27001 or PCI audits\nExperience managing an MDR or MSSP partner\nFamiliarity with breach notification obligations (e.g. UAE PDPL, customer contractual SLAs)\nExperience hiring or mentoring security analysts or engineers as a function grows\nIf you’ve ever looked at a wall of untuned alerts and thought, “I could build a detection and response program that actually catches things,” this is your chance to do it.\nBenefits\nImmediate, large-scale impact on a high-growth business\nTop-of-the-market compensation packages\nWork alongside top regional talent, with team members from Talabat, Careem, Etisalat, and more","description_format":"text","description_chars":3811,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Arab Emirates","iso":"AE","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Romania","iso":"RO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Goods"],"lifecycle":[{"event":"open","at":"2026-10-18T10:05:59Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:0","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/digital-zone-senior-security-operations-engineer","json_url":"https://alion.io/job/digital-zone-senior-security-operations-engineer.json","meta":{"generated_at":"2026-10-20T08:20:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8966,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9375},"rest":"https://alion.io/mcp/rest/get_company?id=9375"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdigital-zone-senior-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdigital-zone-senior-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdigital-zone-senior-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/digital-zone-senior-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdigital-zone-senior-security-operations-engineer"}]}