Cybersecurity Operations Engineer (Europe 100% remote)

ph3About UBQ.io /h3 pUBQ.io is a global technology service provider dedicated to building a more sustainable, independent, and equitable future. We partner with global companies across industries, including AI, blockchain, software, biotech, and education, to transform bold ideas into real, meaningful solutions. /p h3About UBQ.io /h3 pUBQ.io is a global technology service provider dedicated to building a more sustainable, independent, and equitable future. We partner with global companies across industries, including AI, blockchain, software, biotech, and education, to transform bold ideas into real, meaningful solutions. Our expertise spans technology consulting, AI and Machine Learning development, Blockchain integration, and global team collaboration. With a worldwide network of specialists, we help organizations stay ahead in a rapidly evolving digital landscape. At UBQ.io, we don’t just advise, we collaborate. Our commitment to innovation, sustainability, and social responsibility guides everything we do as we help clients build technologies that empower people, communities, and industries to thrive. /p h3About The Role /h3 pThe Cybersecurity Operations Engineer is responsible for the hands‑on implementation, configuration, and optimization of the organization's core security technologies, as well as for writing detections, investigating incidents, and proactively hunting for threats. This role goes beyond monitoring and alerting: the focus is on deploying and tuning the platforms that protect endpoints, network access, web applications, and log data, and on using them to find, understand, and respond to real threats. The ideal candidate has strong technical depth, has personally implemented security tooling in production environments, and thrives in a fast‑paced setting where accuracy, engineering discipline, and security are essential. /p h3Key Responsibilities /h3 ul liImplement, configure, and maintain Endpoint Detection and Response (EDR) platforms, including policy tuning, detection rule management, and response actions. /li liDeploy and manage Security Service Edge (SSE) solutions, including Secure Web Gateway (SWG) and Zero Trust Network Access (ZTNA) components. /li liAdminister and fine‑tune the Security Information and Event Management (SIEM) platform, including log source onboarding, correlation rule development, dashboards, and alert optimization. /li liLead the evaluation, rollout, and integration of new security tooling, ensuring proper documentation and alignment with the broader security architecture. /li liWrite, test, and tune detection content across the security stack, including SIEM correlation rules, EDR custom detections, and WAF rules, mapping coverage to frameworks such as MITRE ATTCK. /li liInvestigate security incidents end to end, from initial triage through analysis, containment, eradication, and post‑incident documentation, coordinating with relevant teams throughout. /li liProactively threat hunt across endpoint, network, and log data to uncover suspicious activity that existing detections may have missed, and turn findings into new detections. /li liDevelop and maintain technical documentation, standard operating procedures, and incident response and detection playbooks. /li liCollaborate with IT, infrastructure, and application teams to embed security controls and support day‑to‑day operations. /li liSupport vulnerability management and drive continuous improvement of the organization's overall security posture. /li /ul h3Requirements /h3 ul liBachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience). /li liAt least 3 years of hands‑on experience implementing and managing core security technologies such as EDR, SSE, SIEM, and WAF. /li liDemonstrated experience deploying, configuring, and tuning these platforms in production, not only reviewing the alerts they generate. /li liExperience gained in a Security Operations Center (SOC) is a plus, provided it includes hands‑on implementation and engineering work rather than monitoring alone. /li liHands‑on experience writing and tuning detections, investigating incidents, and conducting threat hunts, ideally with familiarity with the MITRE ATTCK framework. /li liExcellent understanding of network security, endpoint security, cloud security, and Zero Trust principles. /li liRelevant certifications such as Security+, GCIA, GCIH, OSCP or vendor‑specific credentials are a plus. /li liStrong troubleshooting and problem‑solving skills with a high attention to detail. /li liAbility to handle sensitive information responsibly and securely. /li liGood communication skills and the ability to work effectively across technical and non‑technical teams. /li /ul h3About You /h3 pYou are a hands‑on security practitioner who enjoys building and strengthening defenses rather than only watching dashboards. You have personally stood up and tuned the tools that keep an organization safe, you write your own detections, and you would rather go hunting for a threat than wait for an alert to tell you it is there. You are structured, reliable, and curious about new technologies, and you enjoy working closely with both technical teams and end users to raise the security bar across the environment. /p /p #J-18808-Ljbffr