Security Engineer (SOC + Linux and Kubernetes)

About this Opportunity

Join Ericsson's Mobile Financial Services (MFS) team, where technology enables financial inclusion for millions of users across Africa, the Middle East, and Latin America. As a Security Specialist Engineer, you will support the security, reliability, and operational excellence of the Ericsson Wallet Platform, used by leading operators and banks for mobile financial services.

You will work in a global operations environment, contributing across the solution lifecycle, including security operations, troubleshooting, patching, upgrades, maintenance, and incident management.

What you will do

• Perform advanced triage and investigation of escalated security incidents.
• Conduct threat hunting and correlate security events across SIEM, EDR, firewalls, IDS/IPS, endpoints, cloud, and email security tools.
• Develop and fine-tune SIEM detection rules and security use cases.
• Analyze malware, suspicious artifacts, user behavior, and cloud activities.
• Coordinate incident containment, eradication, recovery, and remediation activities.
• Manage IAM controls, RBAC, least privilege, MFA, conditional access, and access reviews.
• Review and harden cloud resources, including VMs, storage, databases, Kubernetes, and serverless environments.
• Investigate CSPM findings, audit logs, vulnerabilities, and policy violations, and track remediation.
• Troubleshoot, reproduce, and resolve software and security issues while validating fixes and maintaining service operability.
• Support customer SLAs and KPIs, lead incident bridges, and provide timely stakeholder updates.
• Contribute to patching, upgrades, maintenance, and continuous improvement of the solution.
• Participate in the operational shift roster to ensure service and security coverage.

What you will bring

• Bachelor's degree in Software Engineering, Computer Science, or a related field.
• 2 - 5 years of experience in IT security, preferably within a SOC/NOC or service operations environment.
• Strong hands-on experience with Linux and Kubernetes, along with knowledge of cryptography, vulnerability management, SIEM, security audits, and HSM.
• Experience with cloud/SaaS security operations; AWS experience is preferred.
• Good understanding of SSL/TLS, PKI, certificate management, TCP/IP and networking.
• Experience with Docker/Kubernetes and security technologies such as SIEM, firewalls, IDS/IPS, vulnerability scanners, and endpoint security.
• Knowledge of security and compliance frameworks including PCI, CIS, NIST, and ISO.
• Scripting experience with Shell, Python, or Ansible is an advantage.
• Strong troubleshooting, root-cause analysis, documentation, communication, and stakeholder-management skills.
• Knowledge of ITIL and service operations processes such as incident, problem, event, change, and knowledge management is desirable.
• Collaborative, adaptable, customer-focused, and comfortable working in a shift-based operational environment.

All academic credentials must be from recognized and accredited institutions and are further subject to verification.