SecOps Security Engineer – Staff Level, L6

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and oversee comprehensive technical security advancements across cloud infrastructure, including AWS/GCP, Kubernetes, and CI/CD ecosystems.

• Implement production changes directly when necessary.

• Design, execute, and refine detection and response capabilities utilizing SIEM, EDR/MDR, cloud-native detections, and CNAPP.

• Conduct hunting, investigation, and response to security alerts and suspicious activities from initial triage through to recovery and lessons learned.

• Create tools and detection logic to prevent the recurrence of security incidents.

• Develop internal security tools and automations using Infrastructure as Code (IaC), scripts, and integrations.

• Minimize operational burdens and elevate the security baseline as a default practice.

• Report to the Head of Security and collaborate within the Security Operations team.

⛳️ Requirements

• Highly technical security engineer with a builder/hacker mentality.

• Proven ability to transition ideas from prototype to production.

• Proficient in making direct changes within Cloud Infrastructure and DevOps environments.

• Over 5 years of practical experience in security engineering.

• Ideally experienced in a cloud-first SaaS setting.

• Background in a rapidly growing startup, scale-up, or SaaS company.

• Expertise in cloud security engineering in AWS and/or GCP, covering IAM, networking, compute, storage, and logging.

• Knowledge of Kubernetes security, including cluster hardening, workload isolation, runtime security, and policy enforcement.

• Familiarity with container ecosystems.

• Understanding of DevOps principles, including CI/CD security, secrets management, artifact integrity, and secure-by-default platform patterns.

• Experience in incident response and investigation, including the development of repeatable playbooks and automated responses.

• Strong programming and scripting skills in Python or a similar language.

• Comfortable with infrastructure-as-code tools like Terraform and automation techniques.

• Significant coding experience, preferably at the cutting edge of technology.

• Proficiency in endpoint security tools such as CrowdStrike.

• Relevant Information Security certifications are advantageous, such as AWS Certified Security, GIAC GWEB, OSCP, or CSSLP.

• Must be able to work legally in the employment country without visa sponsorship.

🏝️ Benefits

• Stock options.

• Remote-friendly work environment.

• Comprehensive Medical, Dental & Vision coverage at 100%.

• 401k Plan.

• Paid parental leave.

• 25 days of annual leave plus public holidays and paid sick leave.

• Enjoyable culture with regular social events.

• A generous referral program.

• A brand new computer and monitor.

• Budget and support for conference travel, community events, and content production.