Senior Security Operations Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and continuously enhance detection and alerting mechanisms to minimize noise and facilitate swift responses.

• Architect, fine-tune, and manage custom YARA-L detection rules and SOAR playbooks within Google SecOps.

• Automate the triage process, enrich alerts, and initiate incident responses.

• Prioritize alerts using a scalable, data-driven triage framework that aligns with business impact and threat context.

• Lead comprehensive incident investigations in Google SecOps.

• Proactively seek out threats and utilize threat intelligence to uncover new tactics, techniques, and procedures.

• Manage active incidents and drive root-cause analysis for remediation.

• Oversee incident management from detection to resolution, including containment, eradication, and recovery.

• Collaborate with engineering, IT, business, and InfoSec teams.

• Define and uphold operational metrics for incident response.

• Promote ongoing enhancements in response speed, accuracy, and organizational preparedness.

⛳️ Requirements

• Candidates must be capable of obtaining and maintaining a US public trust clearance.

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent professional experience.

• Extensive experience in cloud environments (AWS, GCP, or Azure), with a strong grasp of cloud-native threats.

• Proficient in scripting languages such as Python and Bash for automation and tooling development.

• Practical experience with SOC tools and platforms, including SIEM, SOAR, EDR/XDR, and log management.

• Strong understanding of incident containment and eradication strategies.

• Familiarity with NIST 800-61, CIS Controls, MITRE ATT&CK, and ISO 27001.

• Exceptional analytical, critical thinking, and problem-solving abilities.

• Capacity to consume and synthesize threat intelligence.

• Proficient in process formulation and enhancement.

• Background in threat modeling, adversary emulation, and risk-based alert tuning.

• Strong communication skills tailored for both technical and non-technical audiences.

• Proven experience in leading cross-functional initiatives in high-pressure situations.

• Ability to promote collaboration among InfoSec, IT, and engineering teams.

• Experience in forensics, including investigating incidents and preserving digital evidence.

• Capability to leverage AI for automating and optimizing security operations workflows.

• Ability to design and maintain AI-assisted runbooks with human-in-the-loop validation.

• Skills in integrating security tools with AI platforms and APIs.

• Experience in enhancing vulnerability management and incident response workflows through intelligent prioritization and contextualization.

• Ability to assess the accuracy, reliability, and security implications of AI-driven decisions.

• At least Level 1 AI proficiency, utilizing AI daily to enhance personal productivity.

🏝️ Benefits

• Variable compensation and bonus incentives may be included in total compensation.

• Private company stock options may be part of the total compensation package.

• Additional benefits beyond the total compensation are available.

• Country-specific benefits vary by location.