we are looking for a hands-on Senior Security Operations Engineer who wants to do more than monitor alerts and hand off tickets. In this role, you will have the rare opportunity to identify security problems, understand their root causes, and work directly with the teams responsible for fixing them.
You will strengthen threat detection, incident response, vulnerability management, and cloud security operations through a combination of investigation, engineering, and automation. You will design and tune detections, lead investigations and response efforts, prioritize and route vulnerabilities and CSPM/CWP findings, improve security telemetry, and build capabilities that reduce manual effort and help the organization respond faster.
This is an engineering-focused SecOps role- not a traditional alert-monitoring position. You will be expected to turn operational insights into durable improvements: better detections, stronger controls, cleaner telemetry, streamlined workflows, and measurable risk reduction. You will work closely with Cloud Security, Identity and IT, AppSec, Product Engineering, Platform Engineering, GRC, and service owners to secure corporate and cloud environments.
You will also help shape how secures AI-enabled tools, agents, and automation as they become part of the way we work. If you enjoy moving from signal to solution-and want the autonomy and cross-functional access to make security improvements stick-this role is built for you.
Requirements: 5+ years of hands-on experience in Security Operations, Security Engineering, Detection Engineering, Incident Response, or related field.
Strong experience with SIEM operations, detection engineering, alert triage, investigation, and incident response.
Practical experience with vulnerability management, endpoint patching and hardening, CSPM/CWP, cloud security posture, or attack-surface analysis.
Experience with Azure, AWS, or comparable cloud environments; multi-cloud experience is a plus.
Strong understanding of identity and access risks, privileged activity, risky sign-ins, and cloud administration.
Understanding modern AI security risks, including prompt injection, indirect prompt injection, excessive agency, data leakage, tool misuse, and AI supply-chain risk.
Ability to query and analyze security data using KQL, SQL, or equivalent language.
Ability to automate using Python, PowerShell, JavaScript, or a comparable language, including API integration.
Experience with endpoint, email, SaaS, cloud, and identity security telemetry.
Strong technical writing and communication skills, including the ability to work with distributed, cross-functional teams.
Ability to work independently, make sound decisions under pressure, and manage competing priorities.
This position is open to all candidates.