Senior Security Operations Engineer

About the role

We are seeking a Senior Security Operations Engineer to lead security operations, detection engineering, automation and threat hunting for a leading banking and financial services organization in Colombo.

Key responsibilities

• Design, develop and maintain advanced security detection and response frameworks across enterprise environments.
• Develop, tune and optimize SIEM and XDR detection logic, custom correlation rules and analytics.
• Architect and implement SOAR playbooks and orchestration workflows to automate investigation and response, reducing MTTR.
• Lead proactive threat‑hunting exercises and conduct forensic investigations for significant incidents.
• Collaborate with Red Teams in Purple‑Team exercises to translate offensive findings into defensive detections.
• Oversee onboarding of new log sources and ensure optimal performance of SIEM, SOAR, XDR and EDR platforms.
• Prepare technical documentation, post‑incident reviews and communicate security findings to business stakeholders.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity or related field.
• 3–5 years of experience in information security, including NOC, IT security and automation.
• At least 3 years of hands‑on experience with SIEM/XDR administration, detection engineering or SOC Tier 2/3 operations.
• Proven ability to develop custom detection logic and security automation solutions.
• Strong analytical skills and ability to work under pressure.

Required skills

• SIEM, XDR, SOAR and EDR platforms
• Python, PowerShell, Bash scripting
• Windows and Linux operating environments
• Network protocols: TCP/IP, HTTP, HTTPS, TLS, SSH, DNS
• MITRE ATT&CK framework
• Digital forensics and incident response
• Threat hunting and vulnerability management