Senior Information Security Engineer
About the role
The Senior Information Security Engineer at IFS is a senior technical and leadership role within the global Security Operations Center (SOC). The position is responsible for advanced threat detection, deep-dive investigation, and major cyber incident response in a fast-growing SaaS environment. The role combines hands-on operational work with leading SOC capability-building and transformation initiatives, including detection engineering, automation, and analyst tooling. The engineer acts as a senior escalation point for high-priority incidents, mentors Tier 1/2 analysts, and drives improvements in the organization's defensive posture. Key responsibilities include incident response leadership, forensic analysis, SOC maturity development, threat detection engineering, proactive threat hunting, automation enablement, vulnerability management, documentation, team mentorship, governance, and tooling strategy. The company offers a collaborative, high-performance culture, opportunities for career progression, and values diversity and flexibility.
Must have
- 5+ years of experience within a Security Operations Center (SOC) or Cyber Defense function, including demonstrable experience operating within a fast-growth or rapidly scaling organization.
- Proven track record of developing SOC capability and delivering SOC transformation or maturity programs (e.g. detection engineering, automation, process redesign, tooling consolidation).
- Hands-on experience leading major or high-priority cyber incident response, from initial triage through to executive-level post-incident reporting.
- Strong hands-on expertise with SIEM (preferably Microsoft Sentinel), EDR (e.g. Microsoft Defender for Endpoint) and SOAR platforms.
- Advanced analytical and investigative mindset, with a genuine, demonstrable curiosity for understanding root cause and emerging threat techniques.
- Strong forensics and security analysis skills, with the ability to make sound, well-informed decisions with minimal supervision under pressure.
- Excellent written and verbal communication skills, including the ability to brief non-technical and executive stakeholders during live incidents.
- Degree in Cyber Security, Information Technology, Computer Science or a related field, or equivalent demonstrable experience.
Nice to have
- Experience with SOC automation, AI-enhanced detection and response, KQL analysis, scripting or Python.
- Exposure to threat intelligence platforms and structured frameworks such as MITRE ATT&CK.
- Familiarity with cloud security (Azure/AWS) and modern cyber defense methodologies.
- Experience mentoring or leading junior analysts within a SOC environment.
- Relevant certifications such as CISSP, CISM, GCIH, GCIA, CEH, Azure SC-200/AZ-500 or equivalent blue-team certifications.
Technologies
- AWS
- Azure
- CEH
- CISM
- CISSP
- Cloud Security
- EDR
- IFS
- MITRE ATT&CK
- Python
- SaaS
- Microsoft Sentinel
- SIEM
- Threat Hunting
- Vulnerability Scanning
Highlights
The company supports hybrid and flexible work arrangements to accommodate diverse needs and lifestyles. Certification sponsorship and career development opportunities are available. There is a clear path toward Lead Security Engineer and SOC leadership roles. Application information is available at ifs.com.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka