Senior Cyber Operations Engineer (SIEM/SOAR & Security Platform Engineering)
Senior cybersecurity engineer designing, deploying, and running SIEM/SOAR and security platforms for managed hosting and cloud environments to detect and respond to threats.
- Compensation
- Not disclosed
- Location
- Bangkok, Thailand
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Devops
- Posted
Skills
Must have
- 5+ years of hands-on cybersecurity engineering, SOC, or security operations experience in enterprise or managed services environments.
- Strong expertise in SIEM, SOAR, Detection Engineering, Threat Hunting, Security Automation, and Cyber Operations.
- Experience administering and optimizing security platforms such as Microsoft Sentinel, Splunk, QRadar, Cortex XSOAR, Chronicle, or Elastic Security.
- Proven experience developing detection use cases, correlation rules, automated playbooks, and incident response capabilities.
- Strong knowledge of incident response, digital forensics, major incident management, threat intelligence (CTI), ASM, and active defense methodologies.
- Experience securing and monitoring cloud environments (AWS, Azure, GCP, or OCI), including Zero Trust, identity security, and cloud-native controls.
- Ability to lead investigations of high-severity incidents, drive containment and recovery activities, and mentor SOC team members.
- Hands-on experience implementing security automation, governance standards, operational procedures, and best practices to improve SOC effectiveness and resilience.
Nice to have
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
- Advanced experience with SIEM Engineering, SOAR Engineering, Detection Engineering, Security Platform Management, or SOC Engineering.
- Experience with UEBA (User and Entity Behavior Analytics), advanced analytics, and threat detection use-case development.
- Experience securing and monitoring cloud-native, containerized, and DevSecOps environments.
- Knowledge of threat emulation frameworks such as MITRE ATT&CK and adversary simulation methodologies.
- Hands-on experience with malware analysis, digital forensics, and proactive threat hunting initiatives.
Full description
Who We Are
At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.
The Role
Kyndryl’s Cybersecurity Engineers ensure enterprises remain secure, available, reliable, and resilient. We take Cybersecurity seriously. We’re not just invested; we’re committed. We’re not just protecting data; we’re empowering. Kyndryl is committed to making the world safer, not only by investing in state-of-the-art services and technologies but also by empowering underserved communities with essential cyber skills.
When you walk through our doors, you’re not only joining a team but you’re also becoming part of a legacy. Welcome to Kyndryl, where Cybersecurity isn’t just a job – it’s a passion; a commitment to designing, running, and managing the most modern and reliable technology infrastructure that the world depends on every day.
Are you ready to take on the cyber threats of tomorrow? As a Senior Cybersecurity Engineer, you will play a crucial operational role, responsible for the build, deployment, and support of SIEM, Vulnerability, and AV/EDR services for our Managed Hosting, Private Cloud, and Public Cloud solutions. You will work with key stakeholders to drive continuous improvement in services and resolve complex challenges in customer infrastructure. Your role will involve diagnosing and documenting customer implementations to a high standard, enabling timely resolution for any service issues or SIEM alerts within agreed Service Level Agreements.
You will ensure that the complexities of customer infrastructure are understood and provide support to enhance stability and service. This includes developing new services, making fundamental changes to the SIEM infrastructure, and defining new standards using agreed business processes and best practices. You will significantly contribute to, review, and approve new product and service releases while working with stakeholders to enhance existing services. Additionally, you will support colleagues in escalations and sales opportunities, driving internal service improvement processes and initiatives.
If you’re ready to take on a role where every line of code and every solution you implement could be the difference between security and vulnerability, then Kyndryl is the place for you. Your expertise is not just welcome here – it’s celebrated and valued. Join us as a Senior Cybersecurity Engineer, and together we’ll fortify our cyber defenses, making the world a safer place in the digital age.