> Markdown version of [/jobs/ext/3757106-lead-security-operations-engineer](https://www.wearedevelopers.com/jobs/ext/3757106-lead-security-operations-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Security Operations Engineer

- **Company:** Sungrow USA Corporation
- **Location:** United States
- **Experience:** Expert
- **Salary:** $130,000.0 - $160,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Configuration Management, Cyber Security, Identity and Access Management, IT Management, Intrusion Detection and Prevention, Network Security, Security Information and Event Management, Software Vulnerability Management, Cloud Platform System, National Institute of Standards and Technology Cybersecurity Framework, Security Orchestration, Automation & Response
- **Published:** October 15, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=eb573025c3bb5493

## About the Role

* 5+ years of hands-on experience in cybersecurity operations or engineering roles
 * Demonstrated experience deploying and managing security tools (SIEM, EDR/XDR, IAM, vulnerability management)
 * Hands-on experience supporting cloud environments (AWS and/or Azure)
 * Proven ability to independently investigate and respond to security incidents
 * Strong understanding of security operations workflows, detection, and response processes
 * Ability to work across technical domains, including endpoint, identity, cloud, and network security

Preferred

 * Experience with SOAR or security automation
 * Familiarity with ISO 27001, NIST CSF, SOC 2, or NERC CIP frameworks
 * Experience working in hybrid IT/OT or global enterprise environments
 * Relevant certifications (Security+, CySA+, GCIH, or equivalent)

Competencies

 * Strong technical ownership mindset with the ability to operate independently
 * Effective communicator across technical and non-technical stakeholders
 * Proactive problem-solving with attention to detail
 * Ability to manage multiple priorities in a fast-paced environment
 * Commitment to continuous improvement and skill development

## Description

We are seeking a Security Operations Engineer to join Sungrow Americas' cybersecurity team. This role is responsible for owning and operating security technologies, leading incident response activities, and strengthening detection and response capabilities across IT and cloud environments.

This position operates beyond traditional SOC analyst responsibilities, combining hands-on engineering, tool ownership, and full lifecycle incident response. The Security Operations Engineer will serve as a key technical resource supporting Sungrow's defense-in-depth strategy and overall security maturity.

Security Tooling & Platform Ownership

 * Lead Initial deployment, configuration, and ongoing management of security platforms, including SIEM, EDR/XDR, IAM, vulnerability management, and related tooling
 * Lead integration and optimization of security technologies across enterprise IT, AWS, and Azure environments
 * Continuously improve detection capabilities through alert tuning, correlation rules, and automation

Detection & Incident Response

 * Execute end-to-end incident response, including triage, investigation, containment, remediation, and post-incident analysis
 * Serve as a technical escalation point for security incidents and operational issues
 * Partner with Sungrow's MSSP to ensure effective monitoring, escalation, and response coordination

Cloud & Infrastructure Security

 * Own and execute security hardening and configuration management
 * Identify and remediate security gaps, misconfigurations, and control deficiencies
 * Collaborate with IT and engineering teams to implement and maintain secure configurations

Vulnerability & Risk Management

 * Lead vulnerability management processes, including scanning, prioritization, and remediation tracking
 * Align remediation efforts with risk impact and operational priorities
 * Support audit and compliance activities through technical control validation and evidence generation

Cross-Functional Collaboration & Continuous Improvement

 * Work across IT, engineering, and external partners to drive security improvements
 * Develop and maintain playbooks, procedures, and operational documentation

Contribute to security design decisions and architecture improvements across tooling and cloud environments