Security Operations Engineer

Revizto enables the people behind the world’s most important structures to do their best work.

We connect architects, engineers, contractors, and owners in one shared 2D/3D environment to help deliver complex projects on time and on budget.

From airports and hospitals to data centers and large-scale infrastructure, Revizto supports industry leaders in reducing risk, improving collaboration, and delivering better project outcomes.

Built on a gaming engine, Revizto is designed to handle the scale and complexity of modern construction projects while remaining fast, reliable, and accessible across devices and environments — whether teams are in the office or on site.

Job requirements

We are looking for a Security Operations Engineer to join our Information Security team and play a key role in protecting Revizto's cloud infrastructure, endpoints, and SaaS environments.

In this role, you will be at the forefront of identifying, investigating, and responding to security threats, ensuring that potential risks are detected and addressed effectively.

You will take ownership of security incidents throughout their lifecycle, continuously improve threat detection capabilities, and proactively identify vulnerabilities and emerging threats.

Working closely with Engineering, DevOps, and IT teams, you will contribute to strengthening our overall security posture, enhancing detection coverage, and reducing incident detection and response times.

This is an opportunity to take ownership of meaningful security challenges and directly contribute to the protection and resilience of Revizto's technology environment.

Job responsibilities

• Security Monitoring & Investigation: Monitor, triage, and investigate security alerts and incidents across cloud, endpoint, and SaaS environments, ensuring timely identification and assessment of potential threats.

• Incident Response Management: Lead and coordinate security incident response activities, including containment, eradication, recovery, root-cause analysis, and preparation of comprehensive post-incident reports.

• Threat Detection Engineering: Develop, test, and continuously refine security detection rules to improve accuracy, reduce false positives, and maintain detection coverage aligned with the MITRE ATT&CK framework.

• Proactive Threat Hunting: Conduct proactive threat-hunting activities across cloud, endpoint, and identity telemetry to identify suspicious behavior, emerging threats, and potential security compromises.

• Security Log Analysis: Analyze and correlate security logs and telemetry from AWS, Microsoft Azure/Entra ID, Kubernetes, endpoints, and SaaS applications to detect and investigate potential security incidents.

• Cloud Security & Vulnerability Management: Investigate cloud security findings and vulnerability alerts, collaborate with relevant system owners, and support timely remediation of identified security risks.

• Security Logging & Visibility: Maintain the health, completeness, and reliability of existing security log sources while identifying and onboarding additional sources to improve monitoring and detection coverage.

• Incident Response Documentation: Develop, maintain, and continuously improve incident response runbooks and escalation procedures to ensure consistent and effective handling of security events.