• Monitor security events and alerts using SIEM tools and other security technologies. • Analyze and triage security alerts to determine severity and potential impact. • Perform initial incident response activities and escalate issues when necessary. • Document and track security incidents and their resolutions. • Assist in creating and maintaining security documentation and procedures. • Contribute to the development and improvement of security metrics and reporting. • Collaborate with other team members and departments to address security concerns. • Partner with SOC Analyst II to develop and refine SIEM correlation rules. • Stay informed about emerging threats and security trends.

• strengthen security posture through robust security operations and advanced threat detection • lead security incident management, triage, and investigations • develop innovative solutions to remediate current threats and proactively prevent future attacks • design, implement, and optimize detection logic to identify sophisticated threats • partner closely with Product Security, IT, and Legal teams • report to the Sr. Director, Security Engineering and Operations under the CISO

• Manage multi-step breach and investigative analysis of advanced threats • Serve as an escalation resource and mentor for other analysts • Work directly with cyber threat intelligence to convert intelligence into useful detection • Work with security partners developing and refining monitoring use cases • Work on complex tasks assigned by leadership, which may involve coordination of effort among Level 1/2/3 analysts • Coordinate evidence/data gathering and documentation and review Security Incident reports • Identify root cause incident and take proactive mitigation • Define required security controls and processes and enforces through the execution of policy documentation, standards, education and awareness, and conducting risk assessments. • Monitor external regulatory requirements and supports compliance and certification activities. • Enforce a defense-in-depth methodology in support of the overall enterprise cyber security risk posture. • Create and develop CSIRT processes and procedures working with Level 2 and Level 1 Analysts

Role Description Unit4 Global Cloud Operations Team is seeking a skilled Security Operations Engineer to join our international team. As part of this dynamic team, you will play a key role in maintaining the security and integrity of our cloud infrastructure and environments. You will monitor security systems, analyze threats, and manage security incidents from detection through resolution, ensuring a robust defense against emerging threats. Key Responsibilities: - Continuous Monitoring: Continuously monitor cloud environments for potential security threats. - Threat Analysis: Analyze security alerts and logs to identify suspicious activities. - Incident Response: Lead response efforts during security incidents, including containment, eradication, and recovery. - Investigation: Investigate security breaches and identify root causes. - Post-Incident Review: Conduct post-incident analysis to suggest improvements. - Documentation: Document security incidents and maintain detailed records. - Customer Incident Handling: Act on security incidents reported by customers or identified proactively. - Policy Adherence: Follow established security policies and procedures. - System Maintenance: Monitor and maintain security systems such as firewalls, intrusion detection and prevention systems, and SIEM systems. - Preventative Measures: Implement security measures to prevent future incidents. - Staying Current: Stay up-to-date with the latest security trends and technologies. Qualifications - 3+ years of relevant experience in security monitoring, analysis, and incident response. - Knowledge and experience in hardening OS and other environments/systems. - Knowledge and experience with security-related group policies and their implementation. - Knowledge of forensic analysis and incident management tools. - Familiarity with SIEM tools and security incident management. - Strong analytical and problem-solving skills. - Excellent communication skills, both written and verbal. - Ability to work under pressure and manage multiple incidents simultaneously. - Understanding of security policies and procedures. - Experience with firewalls, intrusion detection/prevention systems, and SIEM systems. Requirements - Familiarity with Microsoft Azure & Microsoft certifications. - Experience with AWS. - Experience with scripting languages (e.g. PowerShell) for automation. - Knowledge of networking, and PKI infrastructure. - Basic Linux skills. Benefits - A culture built on trust and accountability - giving you the freedom and autonomy to be successful and make an impact. - Balance - with our Flexible Leave Paid Time Off policy, remote working opportunities, Global Wellbeing Days, and other great benefits. - Growth opportunities - we provide the tools and guidance required so that you can focus on what really matters to you and ultimately achieve your best work. - Talented colleagues, role models and mentors - work, learn and be inspired by some of the best talent in the software industry. - A commitment to sustainability - with initiatives such as our Environmental, Social, and Governance strategy and Act4Good programme. - A safe and inclusive working environment – supported by our Employee Resource Groups, which are open to all.