Network Operations Center Engineer II

Overview

Hands-on NOC Engineer who also handles security monitoring and incident response across AWS and Kubernetes environments, automating repetitive work and owning incidents end to end.

What you'll do

• Monitor the health, availability and performance of AWS infrastructure, Kubernetes clusters, applications and networks, 24x7 on a rotational basis.
• Act as L2 escalation point: triage, troubleshoot, debug and resolve incidents escalated from L1 or raised by monitoring tools.
• Analyze logs, metrics and traces to find root causes across compute, network, storage, database and application layers.
• Troubleshoot Kubernetes workloads (pods, deployments, services, ingress, nodes) using kubectl and related tools.
• Escalate to engineering, cloud and vendor teams with clear, complete technical context when needed.
• Tune alerts and dashboards to reduce noise and improve signal quality.
• Support change, maintenance and release windows, including validation and rollback checks.
• Monitor security alerts from SIEM, cloud security tools (e.g., AWS GuardDuty, Security Hub, CloudTrail) and endpoint/network sources.
• Triage, investigate and classify security events; separate false positives from real threats.
• Execute first response on security incidents: containment, evidence collection, escalation and follow-up.
• Identify suspicious activity such as unauthorized access, IAM misuse, unusual network traffic, malware or data exfiltration indicators.
• Follow and improve security incident response playbooks.
• Support vulnerability management, access reviews and audit evidence requests.
• Automate repetitive operational and security tasks using scripting (Python, Bash, PowerShell, Go, etc.) or low-code / no-code tools (e.g., n8n, Zapier, Power Automate, SOAR platforms, Lambda, AWS Systems Manager).
• Build auto-remediation, alert enrichment and ticket auto-creation workflows.
• Write and maintain runbooks, SOPs and knowledge base articles.
• Identify recurring issues and drive problem management to permanent fixes.
• Manage incidents, service requests, problems and changes in ticketing tools (e.g., Jira Service Management, ServiceNow, PagerDuty, Opsgenie).
• Meet SLAs for acknowledgement, response and resolution.
• Lead or support major incident bridges; provide clear status updates to stakeholders.
• Write post-incident reviews / RCAs with action items.
• Provide clean, documented shift handovers.

What you'll need

• Strong communication and team coordination.
• Security monitoring/incident response, automation, and troubleshooting/debugging.
• AWS fundamentals, observability tooling, and ITIL/ticketing experience.
• Kubernetes experience.
• Hands-on security experience (SIEM tools, AWS security services, awareness of MITRE ATT&CK/OWASP Top 10).
• A track record of automating manual work (scripting or low-code/no-code).
• Working AWS knowledge (VPC, EC2, IAM, CloudWatch, etc.) and Kubernetes (EKS preferred).
• Strong troubleshooting ability and comfort with Linux CLI.
• 3–6 years in NOC, SOC, cloud ops, or SRE/DevOps support, with ITIL and ticketing experience.
• Bachelor's degree in CS/IT/Electronics or equivalent experience.

Nice to have

• AWS/Security certifications (Security+, CEH, CKA).
• SOAR platform experience.
• Terraform/Git basics.
• Exposure to SOC 2/ISO 27001/GDPR.
• Coding in any language.

Details

• Location: Chennai, India.
• Rotational 24x5 today, expanding to 24x6/24x7, including night/weekend shifts and on-call per roster, with shift allowance and comp-off per policy.