Security Engineer (SOC + Linux and Kubernetes)

About the role

Join Ericsson’s Mobile Financial Services (MFS) team, where technology enables financial inclusion for millions of users across Africa, the Middle East, and Latin America. As a Security Engineer you will support the security, reliability, and operational excellence of the Ericsson Wallet Platform.

Key responsibilities

• Perform advanced triage and investigation of escalated security incidents.
• Conduct threat hunting and correlate events across SIEM, EDR, firewalls, IDS/IPS, endpoints, cloud and email security tools.
• Develop and fine‑tune SIEM detection rules and security use cases.
• Analyze malware, suspicious artifacts, user behaviour and cloud activities.
• Coordinate incident containment, eradication, recovery and remediation.
• Manage IAM controls, RBAC, least‑privilege, MFA, conditional access and access reviews.
• Review and harden cloud resources including VMs, storage, databases, Kubernetes and serverless environments.
• Investigate CSPM findings, audit logs, vulnerabilities and policy violations, tracking remediation.
• Support customer SLAs and KPIs, lead incident bridges and provide stakeholder updates.
• Participate in patching, upgrades, maintenance and continuous improvement of the solution.

Required profile

• Bachelor’s degree in Software Engineering, Computer Science or a related field.
• 2‑5 years of experience in IT security, preferably within a SOC/NOC or service‑operations environment.

Required skills

• Linux and Kubernetes
• SIEM, EDR, firewalls, IDS/IPS
• Cloud security (AWS preferred)
• IAM, RBAC, MFA, conditional access
• Cryptography, vulnerability management, HSM
• SSL/TLS, PKI, certificate management, TCP/IP networking
• Docker, vulnerability scanners, endpoint security
• Security frameworks: PCI, CIS, NIST, ISO
• Scripting: Shell, Python, Ansible