Senior Security Operations Engineer

This is a fully remote position, open to applicants in United States, +2 more locations.

📋 Description

• Oversee security events and conduct technical analysis on alerts.

• Direct information security incidents and investigations involving employees.

• Formulate incident response strategies and manage their execution until incidents are resolved.

• Provide regular updates on incidents to key stakeholders throughout the process.

• Offer clear and concise security guidance for incident response and insider threat initiatives.

• Facilitate the development of services, capabilities, integrations, and technology implementations that support security operations, incident response, and insider threat management.

• Create and sustain runbooks and automated workflows.

• Assist in refining and implementing processes.

• Collaborate with analysts, engineers, and key stakeholders on security initiatives across the company.

• Mentor and train security operations engineers.

⛳️ Requirements

• Over 5 years of experience in Security Incident Response.

• Capability to convey investigative findings and strategies to technical personnel, executive leadership, and legal teams.

• Proficiency in Python, with the ability to develop scripts or tools for investigative processes.

• Ability to mentor and instruct security operations engineers in data collection, analysis, and reporting.

• Hands-on experience in leading security incident responses, which includes monitoring and triaging alerts and coordinating across teams.

• Knowledge of analysis and forensic techniques applicable to macOS, Windows, and Linux platforms.

• Experience with SIEM tools for log reviews.

• Familiarity with cloud architecture and security, particularly with AWS and GCP.

• Must be located in the Pacific, Mountain, or Central Time Zones of the United States or Canada.

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field, or relevant industry experience (ideal candidate qualification).

• GIAC Certified Incident Handler (GCIH) Certification (ideal candidate qualification).

• Understanding of the NIST Cybersecurity Framework, ISO 27001, and FedRAMP (ideal candidate qualification).

🏝️ Benefits

• Initial RSU grant with no vesting cliff.

• Continuous equity refresh opportunities based on performance.

• Performance-based bonus/variable pay.

• Equity for eligible positions.

• Flexible, employee-led remote work model.

• Professional development stipend.

• Comprehensive health plans.

• Parental leave policies.

• Support for remote work.

• Option for in-person office work.