{"id":2503021,"url":"https://alion.io/job/ultahost-internal-security-security-operations-engineer-9","title":"Internal Security & Security Operations Engineer","company":{"id":1792005,"name":"Ultahost","domain":"ultahost.com","url":"https://alion.io/company/ultahost","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cairo, Egypt"],"countries":["EG"],"hiring_countries":["EG"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":81000,"max_usd":191000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1891},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"SIEM","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-08-17T09:11:02Z","employer_posted_date":"2026-08-17","last_verified_at":"2026-10-14T06:44:38Z","board_verified":true,"closed_at":null,"days_open":58,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":58},"description":"UltaHost is looking for a Senior Internal Security & Security Operations Engineer to take ownership of internal security and help strengthen the protection of our workforce, identities, systems, and day-to-day operations.\nThis is a senior, hands-on technical role with responsibility across Identity & Access Management (IAM), internal security, security monitoring, SOC operations, and incident response. The position requires someone who can combine strong technical security expertise with a structured and operational approach to access control, monitoring, investigation, and risk reduction.\nYou will be responsible for securing employee and contractor identities, privileged access, credentials, internal systems, endpoints, VPN and remote access, while ensuring that appropriate security controls are implemented and maintained throughout the account and access lifecycle.\nA key part of the role will also involve actively monitoring security events and investigating suspicious activity across authentication systems, endpoints, internal applications, and cloud/SaaS environments. You will take an active role in identifying potential threats, investigating security incidents, collecting evidence, containing risks, coordinating remediation, and ensuring corrective actions are followed through to closure.\nYou will work closely with HR, IT, system owners, and other technical teams to improve access governance, strengthen internal security controls, enhance detection and response capabilities, and reduce security risks across UltaHost’s internal environment.\nWe are looking for someone who is comfortable taking end-to-end ownership - from implementing preventive controls and improving security monitoring to investigating real incidents and driving security improvements across the organization.\nWhat You’ll Own\nIdentity, Access & Credential Security\nDesign and maintain RBAC across departments, roles, and critical systems.\nManage MFA, SSO, PAM, password vaults, API keys, SSH keys, recovery codes, and secrets.\nOwn security controls around onboarding, role changes, temporary access, contractor access, and offboarding.\nIdentify and remove shared, dormant, unnecessary, and excessively privileged accounts.\nConduct regular access reviews and maintain approval and audit evidence.\nSecurity Monitoring & Incident Response\nMonitor and investigate alerts from SIEM, EDR, IDS/IPS, authentication systems, cloud/SaaS platforms, internal applications, and endpoints.\nInvestigate suspicious logins, compromised accounts, credential leaks, malware, privilege abuse, insider risk, and unauthorized access.\nCollect evidence, contain threats, coordinate recovery, and drive corrective actions through closure.\nMaintain detection rules, alert quality, incident records, escalation paths, and response playbooks.\nLead internal security incidents and support infrastructure/product incidents involving identities or credentials.\nInternal Systems & Workforce Security\nDefine security requirements for laptops, VPN and remote access, email, code repositories, support platforms, finance tools, and administrative systems.\nWork closely with HR and IT on joiner/mover/leaver processes and internal security investigations.\nSupport security awareness, phishing prevention, and secure handling of sensitive information and credentials.\nWhat We’re Looking For\n5+ years of hands-on experience in internal security, IAM, SOC/security operations, incident response, IT security, or a closely related role.\nPractical experience with RBAC, MFA, SSO, PAM, identity providers, password management, account lifecycle management, and access auditing.\nHands-on experience with SIEM, EDR, IDS/IPS, centralized logging, authentication logs, alert triage, and case management.\nProven ability to investigate compromised accounts, malware, credential leaks, suspicious authentication activity, insider risk, and unauthorized access.\nStrong understanding of Linux access, SSH, VPN, endpoints, cloud/SaaS administration, email security, and remote-workforce security.\nStrong organizational skills and the ability to enforce security controls while collaborating with HR, IT, managers, and system owners.\nPreferred Background\nExperience in web hosting, cloud infrastructure, data centers, SaaS, fintech, MSSP, or another distributed technology environment is highly valuable. Preferred certifications include Security+, CySA+, GCIH, SC-200, IAM/PAM vendor certifications, CISSP, or equivalent practical expertise. Certifications are a plus - hands-on experience matters more.\nWhat Success Looks Like\nYou will help us improve:\nMFA and privileged-access coverage\nJoiner/mover/leaver security and access-removal speed\nControl of shared, dormant, and excessive access\nAlert response and incident-resolution times\nAccess-review coverage and security evidence\nInternal security standards, procedures, and playbooks\nImportant\nWe are not looking for a policy/compliance-only profile. The successful candidate must have real hands-on experience administering access controls, operating security tooling, investigating logs, and responding to security incidents.\nYou will work closely with our second cybersecurity specialist, the Product & Infrastructure Security Engineer, as well as DevOps, Network, Product, Engineering, Support, Abuse, HR, Finance, Legal, and executive management.\nIf you enjoy taking ownership, building security controls, investigating real incidents, and improving security in a large-scale technology environment, we’d like to hear from you.","description_format":"text","description_chars":5534,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Egypt","iso":"EG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Web Hosting & VPS"],"lifecycle":[{"event":"open","at":"2026-10-14T06:44:15Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.536,"p_room":0.28,"age_days":58,"expected_fill_days":29,"reasons":["conf:3","win:tail","crowd:brand"],"computed_at":"2026-10-14T09:52:50Z"},"pay":null,"html_url":"https://alion.io/job/ultahost-internal-security-security-operations-engineer-9","json_url":"https://alion.io/job/ultahost-internal-security-security-operations-engineer-9.json","meta":{"generated_at":"2026-10-14T09:52:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11230,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1792005},"rest":"https://alion.io/mcp/rest/get_company?id=1792005"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fultahost-internal-security-security-operations-engineer-9"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fultahost-internal-security-security-operations-engineer-9"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fultahost-internal-security-security-operations-engineer-9"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ultahost-internal-security-security-operations-engineer-9\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fultahost-internal-security-security-operations-engineer-9"}]}