Security Engineer

About the role

Surge Global is seeking a Security Engineer to design, implement, and maintain security solutions across cloud and on‑premise environments. You will work closely with infrastructure, development, and operations teams to protect the company’s digital assets and support a wide range of clients from startups to Fortune 500 firms.

Key responsibilities

• Implement, maintain, and support security controls in AWS, Azure, and GCP as well as on‑premise systems.
• Monitor and manage firewalls, endpoint protection, IDS/IPS, WAF, and access control solutions.
• Conduct continuous security monitoring, alert investigation, incident response, and remediation.
• Assist with threat detection, threat hunting, and vulnerability management initiatives.
• Configure and tune SIEM platforms, perform log analysis, and optimize alerting.
• Perform vulnerability assessments and coordinate remediation with internal teams.
• Integrate security controls into DevOps and CI/CD pipelines following DevSecOps best practices.
• Support security reviews, risk assessments, penetration testing, and compliance audits.
• Maintain security hardening standards aligned with ISO 27001, NIST, and CIS frameworks.
• Document procedures, configurations, and operational activities.

Required profile

• Bachelor’s degree in Cyber Security, IT, Computer Science or a related field.
• 2–4+ years of hands‑on experience in cybersecurity, security operations, or security engineering.
• Strong understanding of cloud security concepts for AWS, Azure, and/or GCP.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar.
• Familiarity with networking concepts, protocols, and IAM principles.

Required skills

• AWS
• Azure
• GCP
• Firewalls
• Endpoint protection
• IDS/IPS
• WAF
• Access control systems
• SIEM
• Splunk
• Microsoft Sentinel
• QRadar
• Log analysis
• Alert tuning
• Vulnerability assessment
• Nessus
• Qualys
• EDR/XDR
• Networking protocols
• IAM
• DevSecOps
• CI/CD pipelines
• Security hardening standards (ISO 27001, NIST, CIS)