SecOps Engineer

About Moon Active and the SecOps Engineer Role

Moon Active, a rapidly expanding mobile game company based in Tel Aviv, is seeking a skilled SecOps Engineer to join its Security Operations team. This role is crucial for defending the organization's security posture end-to-end, encompassing IT security and cloud security. The successful candidate will be involved in third-party and internal security reviews, incident response, proactive threat hunting, and supporting GenAI security initiatives.

Key Responsibilities

• Design, operate, and enhance security infrastructure by maintaining core controls, hardening systems, and leading cloud security efforts to mitigate misconfigurations, vulnerabilities, and identity risks.
• Monitor, investigate, and remediate security alerts and threats through Digital Forensics and Incident Response (DFIR), attack vector analysis, proactive adversary activity hunting, and incident response leadership.
• Conduct security reviews of third-party vendors, SaaS platforms, and internal applications, evaluating architectures, data flows, integrations, and potential risk exposure.
• Provide end-to-end organizational defense across endpoints, identities, applications, and cloud environments by operating and advancing SecOps controls (SIEM/EDR/CSPM), developing automations, enforcing best practices, and collaborating cross-functionally to achieve robust security outcomes.

Required Experience & Skills

• Minimum of 3 years of hands-on experience in security operations, incident response, or a similar cybersecurity role.
• Strong practical experience in IT security, endpoint protection, identity security, and general security operations.
• Solid understanding of major cloud platforms (GCP/AWS/Azure) and practical experience in improving cloud security.
• Strong knowledge of SIEM technologies (Splunk, ELK) and proven experience with incident response and DFIR workflows.
• Proficiency in Python, Bash, or PowerShell for automation and scripting purposes.
• Familiarity with SOAR platforms and the ability to build automated playbooks.
• Excellent communication skills with the capability to collaborate effectively across DevOps, IT, R&D, and business teams.

Key skills/competency

• Security Operations
• Incident Response
• Cloud Security
• DFIR
• Threat Hunting
• SIEM (Splunk, ELK)
• Automation (Python, Bash, PowerShell)
• Endpoint Protection
• Identity Security
• SaaS Security Review