N
Security Operations Engineer/Incident Responder
Contract type
Ongoing
Work mode
Remote · Netherlands
Experience
Senior · 5+ years
Job description
Senior individual contributor role in Nutanix's Security Operations team, providing expert-level incident response, threat investigation and operational improvement across a global 24/7 follow-the-sun model. The position is primarily remote from the Netherlands.
At a glance
- Employment
- Full-time
- Work mode
- Remote · Netherlands
- Pay
- EUR 82,000 – 122,000 / year
What you'll do
- Provide expert analysis, guidance, and consultation on security matters to technical and business stakeholders.
- Lead the investigation, containment, eradication, and recovery of complex and high-severity security incidents.
- Serve as a senior escalation point for incident response, security investigations, and operational issues.
- Lead and mentor Security Operations Engineers and Security Engineers through investigations, incident response activities, and technical problem solving.
- Drive continuous improvement initiatives across security operations, incident response, threat detection, and investigation capabilities.
- Identify, prioritize, and implement operational improvements that strengthen security outcomes and improve response efficiency.
- Collaborate with internal and external stakeholders, including IT, Engineering, Legal, Privacy, Human Resources, and third-party partners.
- Apply advanced knowledge of security operations, threat intelligence, digital forensics, malware analysis, and security engineering to identify and mitigate threats.
- Interpret threat intelligence and translate it into actionable detections, investigative guidance, response actions, and risk reduction initiatives.
- Establish priorities, manage competing objectives, and deliver results within a project management framework.
- Design, develop, and maintain automated workflows, integrations, and tooling that streamline security operations and incident response processes.
- Develop, maintain, and continuously improve incident response processes, playbooks, runbooks, and supporting documentation.
- Contribute to threat hunting, detection engineering, alert triage, and security monitoring initiatives.
- Lead incident response exercises, post-incident reviews, lessons learned activities, and executive-level reporting.
- Partner with Security Engineering and technology teams to improve logging, telemetry, detection coverage, response capabilities, and overall organizational resilience.
- Represent Security Operations in cross-functional projects and provide senior technical leadership across people, process, and technology initiatives without direct people-management responsibility.
What we're looking for
- 5+ years of experience as a Security Analyst, Security Engineer, Incident Responder, Digital Forensics Analyst, or in a related cybersecurity role.
- Demonstrated experience leading complex security incident investigations from initial triage through containment, eradication, recovery, and post-incident review.
- Strong interpersonal, written, and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.
- Expert knowledge of incident response methodologies, investigative techniques, and security operations practices.
- Ability to operate effectively in a 24/7 security operations environment and provide senior-level support during high-severity incidents.
- Detailed knowledge of security tools, endpoint and network telemetry, threat intelligence, digital forensics, and incident investigation.
- Proficiency in relevant security concepts and technologies, including endpoint detection and response, security information and event management, network security monitoring, identity security, cloud security, and automation.
- Experience developing or improving incident-response processes, playbooks, workflows, and supporting documentation.
- Experience leading technical initiatives, mentoring peers, and driving outcomes through influence and collaboration.
- Experience working in a fast-paced, global security operations environment.
- Strong organizational, prioritization, analytical, and problem-solving skills.
- GIAC Certified Forensic Analyst (GCFA) is required.
Nice to have
- Holding both GCFA and GCTI certifications are strongly preferred.
- GIAC Network Forensic Analyst (GNFA) certification.
- GIAC Reverse Engineering Malware (GREM) certification.
- Experience with threat hunting, malware analysis, reverse engineering, or network forensics.
- Experience building security automation, orchestration, or integrations.
- Experience supporting a global follow-the-sun security operations model.
- Experience across security operations, security engineering, threat detection, threat intelligence, detection engineering, alerting and detection triage, incident response, digital forensics, malware analysis, automation and orchestration, and penetration testing.
- Experience conducting or supporting offensive security activities, including penetration testing, red-team engagements, vulnerability assessments, cloud assessments, web application, Active Directory, and cloud security testing, exploit validation, and remediation efforts.
- Certifications such as OSCP, CEH, GPEN, GWAPT, GXPN, GCPN, or equivalent are preferred.
- Programming experience in Python, including developing security tooling, automation, integrations, investigation utilities, or proof-of-concept code.
Your team
Security Operations
Team members are spread across the AMER, EMEA, and APAC regions, operating under a 24/7 follow-the-sun model to provide continuous monitoring and protection of Nutanix's digital assets.
Apply
About Nutanix
Hungry, Humble, Honest, with Heart.
What they value
- Hungry
- Humble
- Honest
- Heart