SecOps Engineer

Monitor, triage, and investigate security alerts for a major rail and travel platform, leading technical incident response and investigation. Build and continuously tune Splunk detections using SPL, reduce false positives, and expand visibility across the environment. Enhance automation and AI-driven workflows for threat detection and alert triage, perform proactive threat hunting, and support SIEM (Splunk) operations. Partner with engineering to embed security best practices and support vulnerability management and compliance activities.