Security Operations Engineer/Incident Responder

Security Operations Engineer/Incident Responder 

Job Description

Hungry, Humble, Honest, with Heart. 

The Opportunity

Are you a highly skilled security professional with a passion for incident response, threat investigation, and operational excellence? Nutanix is seeking a Senior Security Operations Engineer/Incident Responder to join our dynamic Security Operations team. In this role, you will provide expert-level analysis during complex security incidents, lead continuous improvement initiatives, and help strengthen Nutanix's global security operations capabilities.

This is a senior individual contributor role for an experienced security practitioner who can independently manage complex investigations, lead incident-response activities, mentor other engineers, and influence improvements across people, process, and technology. The role offers an exciting career path in a fast-paced environment with opportunities to contribute to global security initiatives and high-impact cybersecurity programs.

About the Team

At Nutanix, you will join our Security Operations team, a group dedicated to safeguarding our systems and data against cyber threats. Team members are spread across the AMER, EMEA, and APAC regions, operating under a 24/7 follow-the-sun model to provide continuous monitoring and protection of Nutanix's digital assets. This global presence fosters a diverse and collaborative team culture where members support one another across time zones to maintain a vigilant defense posture against cyber threats.

You will report to the Senior Manager, Security Operations and work remotely from Netherlands. Nutanix believes in providing employees with the flexibility to work from a location that suits them best. This position is primarily remote, with no mandate to work from an office on specific days.

A 10% travel requirement is expected. Travel may include stakeholder engagements, operations meetings, organizational meetings, planning conferences, and other business needs. Nutanix values a healthy work-life balance and aims to provide roles that align with diverse lifestyles.

Your Role

• Provide expert analysis, guidance, and consultation on security matters to technical and business stakeholders.
• Lead the investigation, containment, eradication, and recovery of complex and high-severity security incidents.
• Serve as a senior escalation point for incident response, security investigations, and operational issues.
• Lead and mentor Security Operations Engineers and Security Engineers through investigations, incident response activities, and technical problem solving.
• Drive continuous improvement initiatives across security operations, incident response, threat detection, and investigation capabilities.
• Identify, prioritize, and implement operational improvements that strengthen security outcomes and improve response efficiency.
• Collaborate with internal and external stakeholders, including IT, Engineering, Legal, Privacy, Human Resources, and third-party partners.
• Apply advanced knowledge of security operations, threat intelligence, digital forensics, malware analysis, and security engineering to identify and mitigate threats.
• Interpret threat intelligence and translate it into actionable detections, investigative guidance, response actions, and risk reduction initiatives.
• Establish priorities, manage competing objectives, and deliver results within a project management framework.
• Design, develop, and maintain automated workflows, integrations, and tooling that streamline security operations and incident response processes.
• Develop, maintain, and continuously improve incident response processes, playbooks, runbooks, and supporting documentation.
• Contribute to threat hunting, detection engineering, alert triage, and security monitoring initiatives.
• Lead incident response exercises, post-incident reviews, lessons learned activities, and executive-level reporting.
• Partner with Security Engineering and technology teams to improve logging, telemetry, detection coverage, response capabilities, and overall organizational resilience.
• Represent Security Operations in cross-functional projects and provide senior technical leadership across people, process, and technology initiatives without direct people-management responsibility.

What You Will Bring

• 5+ years of experience as a Security Analyst, Security Engineer, Incident Responder, Digital Forensics Analyst, or in a related cybersecurity role.
• Demonstrated experience leading complex security incident investigations from initial triage through containment, eradication, recovery, and post-incident review.
• Strong interpersonal, written, and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.
• Expert knowledge of incident response methodologies, investigative techniques, and security operations practices.
• Ability to operate effectively in a 24/7 security operations environment and provide senior-level support during high-severity incidents.
• Detailed knowledge of security tools, endpoint and network telemetry, threat intelligence, digital forensics, and incident investigation.
• Proficiency in relevant security concepts and technologies, including endpoint detection and response, security information and event management, network security monitoring, identity security, cloud security, and automation.
• Experience developing or improving incident-response processes, playbooks, workflows, and supporting documentation.
• Experience leading technical initiatives, mentoring peers, and driving outcomes through influence and collaboration.
• Experience working in a fast-paced, global security operations environment.
• Strong organizational, prioritization, analytical, and problem-solving skills.

Required Certifications

• GIAC Certified Forensic Analyst (GCFA) is required.
• Holding both GCFA and GCTI certifications are strongly preferred.

Nice to Have

• GIAC Network Forensic Analyst (GNFA) certification.
• GIAC Reverse Engineering Malware (GREM) certification.
• Experience with threat hunting, malware analysis, reverse engineering, or network forensics.
• Experience building security automation, orchestration, or integrations.
• Experience supporting a global follow-the-sun security operations model.

Preferred Experience and Certifications

• Experience across security operations, security engineering, threat detection, threat intelligence, detection engineering, alerting and detection triage, incident response, digital forensics, malware analysis, automation and orchestration, and penetration testing.
  
  
• Experience conducting or supporting offensive security activities, including penetration testing, red-team engagements, vulnerability assessments, cloud assessments, web application, Active Directory, and cloud security testing, exploit validation, and remediation efforts. Certifications such as OSCP, CEH, GPEN, GWAPT, GXPN, GCPN, or equivalent are preferred and demonstrate a strong understanding of adversary tactics, techniques, and procedures (TTPs).

• Programming experience in Python, including developing security tooling, automation, integrations, investigation utilities, or proof-of-concept code.

Pay Transparency: The OTE range for this position at commencement of employment is expected to be between EUR €97,000 and EUR €145,000 per year.

Please note that OTE offered may vary depending on relevant objective factors, including market location, job-related knowledge, skills, and experience.

Work Arrangement

Remote: This position is primarily remote from Netherlands. There is no specific in-office requirement, however, there may be circumstances where you may be required to come into a local office for a specific purpose, visit the clients and/or to travel to other locations based on business needs.

We're an Equal Opportunity Employer 

Nutanix is an Equal Employment Opportunity and (in the U.S.) an Affirmative Action employer. Qualified applicants are considered for employment opportunities without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, protected veteran status, disability status or any other category protected by applicable law. We hire and promote individuals solely on the basis of qualifications for the job to be filled. We strive to foster an inclusive working environment that enables all our Nutants to be themselves and to do great work in a safe and welcoming environment, free of unlawful discrimination, intimidation or harassment. As part of this commitment, we will ensure that persons with disabilities are provided reasonable accommodations. If you need a reasonable accommodation, please let us know by contacting [email protected].

--