Security Operations Tech Lead

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Enhance cloud detection and response capabilities across both Google Cloud Platform (GCP) and AWS.

• Design, test, deploy, and continually refine detections for intricate cloud threats, including identity and access misuse, suspicious application behavior, data leakage, and attacks on containers and Kubernetes.

• Spearhead proactive threat hunting and cloud asset discovery projects to pinpoint visibility gaps and prioritize detection coverage in multi-cloud environments.

• Manage complete telemetry pipelines that gather, parse, normalize, and enrich cloud audit, network, and application logs while balancing investigative value, data retention, data protection, and cost efficiency.

• Implement Site Reliability Engineering (SRE) principles in telemetry and detection services, establishing SLOs/SLIs for data freshness, availability, and completeness.

• Create actionable alerting, recovery protocols, and capacity plans.

• Develop software, Infrastructure as Code (IaC), and automated workflows to minimize manual toil and technical debt.

• Uphold code review, automated testing, version control, and CI/CD deployment practices for detection content.

• Collaborate with Cloud Infrastructure, Platform, and Product Engineering teams to establish effective security controls.

• Take broad technical ownership, lead cross-functional initiatives, and mentor engineers throughout the organization.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience.

• Over 8 years of professional experience in security engineering, site reliability engineering, platform engineering, or security operations involving production cloud systems.

• Extensive technical knowledge in securing Google Cloud Platform (GCP) or Amazon Web Services (AWS), with a strong emphasis on IAM, VPC networking, cloud logging, and containerized workloads.

• Practical experience in developing security detection logic, investigating threats, and engineering security telemetry within an enterprise SIEM or a modern analytics platform.

• Proven experience with Infrastructure as Code (e.g., Terraform), CI/CD pipelines, troubleshooting distributed systems, and production observability.

• Advanced expertise in native GCP security services along with multi-cloud operations across AWS and Azure.

• Hands-on experience in engineering high-volume log ingestion pipelines, custom parsers, and threat detections using CrowdStrike Falcon Next-Gen SIEM, Humio/LogScale, or contemporary big data platforms (BigQuery, Snowflake).

• Experience in designing and implementing security controls within healthcare, life sciences, or highly regulated environments subject to HIPAA, NIST frameworks, or CIS benchmarks.

• Established experience in securing Kubernetes clusters (GKE/EKS), container runtimes, web applications, and AI/ML workloads that incorporate Large Language Models (LLMs).

• This role is eligible for Verily-sponsored immigration assistance.

🏝️ Benefits

• Bonus

• Benefits

• Verily-sponsored immigration support