Senior Information Technology Security Officer
About the role
The Senior Security Operations Engineer will lead the design, development, and maintenance of advanced security detection and response frameworks within a banking and financial services environment. Key responsibilities include developing and optimizing SIEM and XDR detection logic, creating custom analytics and detection mechanisms, leading security automation initiatives, conducting threat hunting and incident response, collaborating on Purple Teaming exercises, and managing security platforms. The role also involves preparing technical documentation, reporting, and mentoring SOC analysts. Candidates should have a strong background in information security, advanced SIEM/XDR administration, scripting, and a deep understanding of cybersecurity frameworks and protocols.
Must have
- Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or a related discipline.
- Minimum 3–5 years of experience in Information Security. (Candidates should have strong experience in: NOC , IT Security, NOC Automation )
- At least 3 years of experience in advanced SIEM/XDR administration, Detection Engineering, Threat Hunting, or SOC Tier 2/Tier 3 operations.
- Strong expertise in designing, implementing, and optimizing SIEM, XDR, SOAR, and EDR platforms.
- Proven experience developing custom detection logic, advanced analytics, and correlation rules.
- Hands-on experience with security automation, orchestration, and response engineering.
- Advanced proficiency in Python, PowerShell, Bash, or similar scripting languages.
- Strong understanding of Windows and Linux operating environments.
- Strong knowledge of network and application protocols including TCP/IP, HTTP, HTTPS, TLS, SSH, DNS, and related technologies.
- Deep understanding of the MITRE ATT&CK Framework and MITRE D3FEND methodologies.
- Experience with digital forensics, incident response, threat hunting, and vulnerability management.
- Strong analytical skills and ability to solve complex cybersecurity challenges under pressure.
- Excellent communication skills with the ability to present technical concepts to both technical and non-technical stakeholders.
- Strong stakeholder management and collaboration capabilities.
- CEH (Certified Ethical Hacker)
- CHFI (Computer Hacking Forensic Investigator)
- CySA+
- CSXP
- SSCP
Nice to have
- Other relevant cybersecurity certifications will be considered an advantage.
Technologies
- Bash
- CEH
- Cybersecurity
- DNS
- EDR
- Linux
- MITRE ATT&CK
- PowerShell
- Python
- SIEM
- SSH
- TCP/IP
- Threat Hunting
- TLS
- Windows
- XDR
Highlights
The position is onsite in Colombo - 01, with standard Monday to Friday working hours. Applications can be submitted via email to recruitment7@intalent.asia or through an easy apply link. Professional certifications such as CEH, CHFI, CySA+, CSXP, SSCP, or other relevant cybersecurity certifications are required, with additional certifications considered an advantage.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka