K

Kyndryl

Managed IT infrastructure and cloud services

Senior Cyber Operations Engineer - SIEM/SOAR & Security Platform Engineering

Security Engineering & Architecture +1Confirmed live in the last 24 hours
Full-timeBangkok, ThailandNo salary listedIn-person

About the Job

Requirements

  • At least five years of hands-on cybersecurity engineering, security operations center, or security operations experience in enterprise or managed services environments.
  • Strong expertise in security information and event management, security orchestration, automation and response, detection engineering, threat hunting, security automation, and cyber operations.
  • Experience administering and optimizing security platforms such as Microsoft Sentinel, Splunk, QRadar, Cortex XSOAR, Chronicle, or Elastic Security.
  • Proven experience developing detection use cases, correlation rules, automated playbooks, and incident response capabilities.
  • Strong knowledge of incident response, digital forensics, major incident management, threat intelligence, attack surface management, and active defense methodologies.
  • Experience securing and monitoring cloud environments such as AWS, Azure, GCP, or OCI, including Zero Trust, identity security, and cloud-native controls.
  • Ability to lead investigations of high-severity incidents, drive containment and recovery activities, and mentor security operations center team members.
  • Hands-on experience implementing security automation, governance standards, operational procedures, and best practices to improve security operations center effectiveness and resilience.

Responsibilities

  • Design, deploy, configure, and support security information and event management, vulnerability management, and antivirus/endpoint detection and response solutions across managed hosting, private cloud, and public cloud environments.
  • Monitor, investigate, and resolve complex security incidents, alerts, and infrastructure issues while meeting agreed service level agreements.
  • Lead technical troubleshooting, root cause analysis, and remediation activities to improve the security, stability, and performance of customer environments.
  • Collaborate with customers, architects, and cross-functional teams to assess security requirements and implement cybersecurity solutions.
  • Drive continuous service improvement by enhancing security processes, workflows, monitoring capabilities, and operational efficiency.
  • Develop and maintain technical documentation, implementation standards, operational procedures, and security best practices to support service delivery.
  • Contribute to the development, testing, review, and implementation of new cybersecurity services, platforms, and technology enhancements.
  • Provide technical leadership during escalations, support pre-sales activities, and mentor team members while promoting security, innovation, and operational excellence.

Desired Qualifications

  • Advanced experience with security information and event management engineering, security orchestration, automation and response engineering, detection engineering, security platform management, or security operations center engineering.
  • Experience with user and entity behavior analytics, advanced analytics, and threat detection use-case development.
  • Experience securing and monitoring cloud-native, containerized, and DevSecOps environments.
  • Knowledge of threat emulation frameworks such as MITRE ATT&CK and adversary simulation methodologies.
  • Hands-on experience with malware analysis, digital forensics, and proactive threat hunting initiatives.
  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.

About the Company

Kyndryl

Managed IT infrastructure and cloud services

Kyndryl provides managed IT infrastructure services for large enterprises, helping them run and modernize their technology environments. Its offerings cover cloud adoption, cybersecurity, security operations, and digital workplace services, all delivered under long-term managed-service contracts. The company works by partnering with major technology providers (including Microsoft) to offer integrated, end-to-end solutions, often complemented by a new security operations center (SOC) and other security capabilities. This focus sets it apart from competitors through scale, enterprise-grade governance, and a history rooted in IBM’s infrastructure services, now independent but aligned with large technology partners. The goal is to support digital transformation by providing reliable, scalable, and secure infrastructure management that enables enterprises to operate efficiently and securely in a cloud-enabled world.

Company size
10,001+
Company stage
IPO
Headquarters
New York City, New York
Founded
2021

Recently Posted Jobs

Explore more opportunities at Kyndryl

See more jobs