Senior SecOps Engineer

About the role

UVeye is looking for a proactive Senior SecOps Engineer to join its InfoSec team. You will own security initiatives across the organization, aligning security with infrastructure, R&D, and IT while embedding protection into CI/CD pipelines and cloud environments.

Key responsibilities

• Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing solutions.
• Integrate security controls into DevOps workflows, including CI/CD pipelines and Infrastructure as Code.
• Design, enforce, and monitor security policies for cloud architectures (AWS, GCP).
• Lead incident response, vulnerability management, and forensic investigations.
• Drive compliance with ISO 27001, SOC 2, GDPR and prepare for audits.
• Collaborate with CISO, COO, architects, DevOps, IT, Finance, HR and other stakeholders to prioritize security needs.
• Continuously monitor systems for vulnerabilities, intrusions, and misconfigurations.
• Plan and oversee penetration testing initiatives.

Required profile

• 5+ years of experience in security operations or related roles.
• Relevant security certifications (e.g., CISSP, CISM, AWS Security).
• Proven experience in IT, networking, infrastructure, and DevOps environments.
• Deep knowledge of cloud security best practices for AWS and GCP.
• Familiarity with ISO 27001, SOC 2, GDPR and GRC processes.
• Experience leading incident response and forensic investigations.

Required skills

• AWS
• Google Cloud Platform (GCP)
• CI/CD pipelines
• Infrastructure as Code (IaC)
• Static code analysis tools
• Cloud posture monitoring (CSPM, ASPM, DSPM)
• Penetration testing tools
• VPC, firewalls, IAM, encryption
• ISO 27001, SOC 2, GDPR
• GRC frameworks
• AWS GuardDuty
• Azure Sentinel
• Splunk
• QRadar
• ArcSight
• CrowdStrike
• SentinelOne
• Microsoft Defender