Security Engineer III

This is a fully remote position, open to applicants in California.

📋 Description

• Take ownership of detection and response across the entire cloud infrastructure.

• Develop and establish a security data lake by selecting, normalizing, retaining, and managing the costs associated with Azure, AWS, SaaS, and endpoint telemetry.

• Create, refine, version-control, test, deploy, measure, and phase out detections as code.

• Automate the triage and enrichment of alerts and integrate runbooks into the existing tooling.

• Aim to minimize the mean time to detect and mean time to respond for critical alert categories.

• Strengthen Azure and AWS environments, focusing on identity and RBAC boundaries, network egress, key and secret management, logging coverage, and controls for public exposure.

• Provide cloud security controls in the form of Terraform modules and pipelines.

• Prioritize and manage remediation queues for cloud security posture in collaboration with resource-owning teams.

• Evaluate detection coverage against established threat frameworks and address any identified gaps.

• Set strategic direction for detection and cloud-security tools.

• Collaborate with SRE, Product Engineering, and Security Engineering teams.

⛳️ Requirements

• Over 5 years of experience in security engineering, cloud operations, or detection engineering, with recent hands-on responsibilities in production cloud security.

• Proven experience with Terraform in production environments, including the creation and maintenance of modules used by other teams.

• In-depth operational knowledge of both Azure and AWS, encompassing identity models, logging and audit sources, network boundaries, and provider defaults.

• Demonstrated ability to build detections based on real telemetry, fine-tune false positives, and validate deployed rules.

• Strong understanding of cloud security principles: RBAC and least privilege, secret and key management, egress control, and preventing public exposure.

• Proficiency in at least one security-data query language, such as KQL, SQL, or an equivalent.

• Capability in scripting and automation using Python or a similar language.

• Proven history of delivering production code or infrastructure.

• Bonus: Experience with Microsoft Sentinel at a production scale.

• Bonus: Familiarity with Wiz.

• Bonus: Experience in cloud incident response.

• Bonus: Experience with security data lake or SIEM migration.

• Bonus: Exposure to Kubernetes and container security, including AKS and EKS.

• Bonus: Knowledge of SOC 2 Type 2, ISO 27001, FedRAMP, or HITRUST audit requirements.

• Bonus: Relevant certifications such as Azure or AWS security specialty, GCIA, or GCDA.

🏝️ Benefits

• Unlimited paid time off.

• 12 paid holidays, including 4 global VeeaMe Days dedicated to self-care.

• 24 paid volunteer hours each year through Veeam Cares.

• Paid parental leave: 8 weeks for all parents, 16 weeks for birthing parents.

• Medical, dental, and vision coverage starting on the first day of employment.

• Access to mental health support, therapy sessions, and digital wellness tools via the Employee Assistance Program.

• 401(k) retirement plan with company matching contributions.

• Support for fertility, adoption, and surrogacy through Maven.

• AirVet: 24/7 virtual veterinary care at no cost.

• Legal services, identity protection, and supplemental health insurance options available.

• Tax-advantaged spending accounts for healthcare, dependent care, and commuting expenses.

• On-demand learning resources including LinkedIn Learning and O’Reilly.

• Mentoring, workshops, and learning events, including the annual Global Day of Learning.

• Comprehensive benefits package that includes health coverage, retirement plans, and unlimited time off.