Description
Zendesk is looking for an experienced Security Operations Engineer to join its growing Cyber Security team. The role involves monitoring, investigating, and responding to security threats, combining hands-on security operations with threat hunting, incident response, cloud security, DLP investigations, and continuous improvement of security tools, processes, and automation.
Responsibilities:
- Serve as a primary incident responder addressing critical security alerts and incidents across enterprise infrastructure, product offerings, and client environments.
- Leverage enterprise security platforms to perform threat analysis, examine security incidents, and execute daily operational response workflows.
- Conduct proactive threat hunts to identify visibility gaps and support deeper investigations.
- Analyze Data Loss Prevention alerts, assess data-exfiltration risks, and assist with complex forensic analysis.
- Collaborate with audit and compliance partners to respond to regulatory inquiries.
- Lead cross-functional tabletop simulations by partnering with key internal stakeholders.
- Stay current on emerging threats and attacker tactics.
- Lead or manage technical cybersecurity investigations, including triage, scoping, containment, and documentation.
- Contribute to the development and operation of automation and orchestration tools that reduce manual effort and improve response consistency.
- Leverage artificial intelligence responsibly to enhance security orchestration, accelerate investigation workflows, and assist with building AI capabilities.
- Collaborate with Security Engineering partners to enhance operational monitoring, threat detection, and incident response mechanisms.
- Collaborate with the Threat Intelligence team and broader security community to build relationships and share knowledge.
- Partner with internal stakeholders and business partners to explain major security incidents and implement actionable risk mitigation strategies.
- Demonstrate adaptability by taking on expanding responsibilities and working effectively in dynamic, rapidly evolving environments.
- Join Zendesk’s global cyber security on-call rotation to support continuous response operations.
- Provide regional coverage across APAC through scheduled operational shifts.
Requirements:
- Bachelor's degree in Computer Science or a related field.
- 7+ years of experience in cybersecurity, SOC, incident response, or threat hunting.
- Strong analytical and problem-solving skills.
- Excellent written, verbal, and presentation skills.
- Experience with Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), and other log-aggregation tools.
- Experience investigating Data Loss Prevention (DLP) and User and Entity Behavior Analytics (UEBA) alerts.
- Good understanding of cloud infrastructure and cloud security alerts.
- Cybersecurity certifications such as CEH, CHFI, or AWS Certified Security Specialist are a plus.