{"id":2737670,"url":"https://alion.io/job/revizto-security-operations-engineer-4","title":"Security Operations Engineer","company":{"id":1973040,"name":"Revizto","domain":"revizto.com","url":"https://alion.io/company/revizto","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"HiBob","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United Kingdom"],"countries":["GB"],"hiring_countries":["DE","FR","GB","AM"],"hiring_countries_total":4,"salary":null,"salary_estimate":{"min_usd":51000,"max_usd":122000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-16T16:29:30Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-17T07:25:59Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Revizto enables the people behind the world’s most important structures to do their best work. We connect architects, engineers, contractors, and owners in one shared 2D/3D environment to help deliver complex projects on time and on budget. From airports and hospitals to data centers and large-scale infrastructure, Revizto supports industry leaders in reducing risk, improving collaboration, and delivering better project outcomes. Built on a gaming engine, Revizto is designed to handle the scale and complexity of modern construction projects while remaining fast, reliable, and accessible across devices and environments - whether teams are in the office or on site.\nKey Responsibilities & Requirements\nSecurity Monitoring & Investigation: Monitor, triage, and investigate security alerts and incidents across cloud, endpoint, and SaaS environments, ensuring timely identification and assessment of potential threats.\nIncident Response Management: Lead and coordinate security incident response activities, including containment, eradication, recovery, root-cause analysis, and preparation of comprehensive post-incident reports.\nThreat Detection Engineering: Develop, test, and continuously refine security detection rules to improve accuracy, reduce false positives, and maintain detection coverage aligned with the MITRE ATT&CK framework.\nProactive Threat Hunting: Conduct proactive threat-hunting activities across cloud, endpoint, and identity telemetry to identify suspicious behavior, emerging threats, and potential security compromises.\nSecurity Log Analysis: Analyze and correlate security logs and telemetry from AWS, Microsoft Azure/Entra ID, Kubernetes, endpoints, and SaaS applications to detect and investigate potential security incidents.\nCloud Security & Vulnerability Management: Investigate cloud security findings and vulnerability alerts, collaborate with relevant system owners, and support timely remediation of identified security risks.\nSecurity Logging & Visibility: Maintain the health, completeness, and reliability of existing security log sources while identifying and onboarding additional sources to improve monitoring and detection coverage.\nIncident Response Documentation: Develop, maintain, and continuously improve incident response runbooks and escalation procedures to ensure consistent and effective handling of security events.\n RequirementsProfessional Experience: At least 3 years of hands-on experience in a Security Operations Center (SOC), incident response, or security detection role.\nSIEM & EDR Technologies: Practical experience working with Security Information and Event Management (SIEM) solutions, preferably Microsoft Sentinel, and Endpoint Detection and Response (EDR) platforms, preferably CrowdStrike Falcon.\nDetection Engineering & Query Languages: Ability to write, analyze, optimize, and tune security detection queries using Kusto Query Language (KQL) or similar query languages.\nCybersecurity Fundamentals: Solid understanding of common cyberattack techniques, threat behaviors, and the MITRE ATT&CK framework, combined with a strong foundation in AWS and Azure cloud security principles.\nEnd-to-End Incident Response: Proven experience managing security incidents throughout their entire lifecycle, from initial alert investigation and triage through containment, eradication, recovery, root-cause analysis, and post-incident reporting.\nSecurity Frameworks & Standards: Knowledge of established information security frameworks and standards, including ISO 27001, NIST, CIS, and SOC 2.\nEnglish Proficiency: Upper-intermediate (B2) or higher proficiency in English, both written and spoken.\nPreferred QualificationsHands-on experience conducting proactive threat-hunting activities to identify and investigate potential security threats.\nKnowledge of Kubernetes and container security principles, including common risks and security considerations in containerized environments.\nBasic scripting skills in Python, PowerShell, or Bash to support security investigations, analysis, and operational tasks.\nOne or more relevant professional certifications, such as GCIH, GCIA, GCFA, GCTI, Microsoft SC-200, or CrowdStrike CCFA/CCFH.\nPersonal & Professional CompetenciesComposure Under Pressure: Ability to remain calm, structured, and focused when managing security incidents and working under time-sensitive conditions.\nCommunication & Reporting: Strong written communication skills, with the ability to clearly explain security incidents, technical findings, and their impact to both engineering teams and executive stakeholders.\nCollaboration & Ownership: A proactive team player who can work effectively both independently and collaboratively, take ownership of responsibilities, and continuously identify opportunities to improve security processes.\nRelationship Building: Ability to establish and maintain strong, productive working relationships with colleagues across teams and at all organizational levels.\nPosition Overview\nWe are looking for a Security Operations Engineer to join our Information Security team and play a key role in protecting Revizto's cloud infrastructure, endpoints, and SaaS environments.In this role, you will be at the forefront of identifying, investigating, and responding to security threats, ensuring that potential risks are detected and addressed effectively. You will take ownership of security incidents throughout their lifecycle, continuously improve threat detection capabilities, and proactively identify vulnerabilities and emerging threats.\nWorking closely with Engineering, DevOps, and IT teams, you will contribute to strengthening our overall security posture, enhancing detection coverage, and reducing incident detection and response times. This is an opportunity to take ownership of meaningful security challenges and directly contribute to the protection and resilience of Revizto's technology environment.\nWhy Join Us\nRecognised as one of Switzerland’s Best Managed Companies by Deloitte for three consecutive years from 2024 through\nCompany-wide trips, including Armenia in 2023 and Switzerland in 2025, with more to come\nA flexible, employee-focused culture\nAn innovative and collaborative team environment\nGreat working conditions designed to support your best work\nWe can only accept applications from candidates based in Germany, Armenia, France or the UK.","description_format":"text","description_chars":6382,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"},{"name":"France","iso":"FR","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Armenia","iso":"AM","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Software","Branding","Team Communication & Collaboration"],"lifecycle":[{"event":"open","at":"2026-10-16T19:37:03Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["conf:1","wave","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/revizto-security-operations-engineer-4","json_url":"https://alion.io/job/revizto-security-operations-engineer-4.json","meta":{"generated_at":"2026-10-17T10:09:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13288,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1973040},"rest":"https://alion.io/mcp/rest/get_company?id=1973040"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frevizto-security-operations-engineer-4"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frevizto-security-operations-engineer-4"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frevizto-security-operations-engineer-4"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/revizto-security-operations-engineer-4\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frevizto-security-operations-engineer-4"}]}