Senior Cyber Operations Engineer (SIEM/SOAR & Security Platform Engineering)

Kyndryl is hiring a Senior Cyber Operations Engineer based in Bangkok, Thailand, to support enterprise and managed-services customers. The role involves designing, deploying, configuring, and supporting SIEM, Vulnerability Management, and AV/EDR solutions across managed hosting, private cloud, and public cloud environments, while monitoring, investigating, and resolving complex security incidents to meet SLAs.

Candidates need 5+ years of hands-on cybersecurity engineering or SOC experience in enterprise or managed services settings, with strong expertise in SIEM, SOAR, detection engineering, threat hunting, and security automation. Experience with platforms such as Microsoft Sentinel, Splunk, QRadar, Cortex XSOAR, Chronicle, or Elastic Security, as well as cloud security across AWS, Azure, GCP, or OCI, is required.

Design, deploy, configure, and support SIEM, Vulnerability Management, and AV/EDR security solutions across Managed Hosting, Private Cloud, and Public Cloud environments.

Monitor, investigate, and resolve complex security incidents, alerts, and infrastructure issues while meeting agreed SLAs.

Lead technical troubleshooting, root cause analysis, and remediation activities for customer environments.

Collaborate with customers, architects, and cross-functional teams to assess security requirements and implement solutions.

Provide technical leadership during escalations, support pre-sales activities, and mentor team members.

5+ years of hands-on cybersecurity engineering, SOC, or security operations experience in enterprise or managed services environments.

Strong expertise in SIEM, SOAR, Detection Engineering, Threat Hunting, Security Automation, and Cyber Operations.

Experience administering and optimizing platforms such as Microsoft Sentinel, Splunk, QRadar, Cortex XSOAR, Chronicle, or Elastic Security.

Experience developing detection use cases, correlation rules, automated playbooks, and incident response capabilities.

Experience securing and monitoring cloud environments (AWS, Azure, GCP, or OCI), including Zero Trust and identity security.