Senior Security Operations Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and continually enhance detection and alerting mechanisms to minimize noise and facilitate swift responses.

• Design, improve, and sustain custom YARA-L detection rules and SOAR playbooks within Google SecOps.

• Automate the processes of triage, alert enrichment, and preliminary incident response.

• Propel alert prioritization through a scalable, data-oriented triage framework that aligns with business impact and threat context.

• Oversee comprehensive incident investigations in Google SecOps.

• Actively seek out threats and utilize threat intelligence to discover new tactics, techniques, and procedures.

• Manage active incidents and lead root-cause analysis and remediation efforts.

• Take ownership of incident management from detection to resolution, including containment, eradication, and recovery.

• Collaborate effectively with engineering, IT, business, and InfoSec teams.

• Establish and uphold operational metrics for incident response.

• Pursue ongoing enhancements in response speed, accuracy, and organizational preparedness.

⛳️ Requirements

• Candidates must possess the ability to obtain and maintain a US public trust clearance.

• A Bachelor's degree in Computer Science, Cybersecurity, or equivalent professional experience is required.

• Significant experience in cloud environments (AWS, GCP, or Azure), with a solid understanding of cloud-native threats.

• Proficiency in scripting languages such as Python and Bash for automation and tool development.

• Practical experience with SOC tools and platforms, including SIEM, SOAR, EDR/XDR, and log management.

• Strong comprehension of incident containment and eradication strategies.

• Knowledge of NIST 800-61, CIS Controls, MITRE ATT&CK, and ISO 27001.

• Exceptional analytical, critical thinking, and problem-solving abilities.

• Skill in consuming and synthesizing threat intelligence.

• Expertise in process formulation and improvement.

• Background in threat modeling, adversary emulation, and risk-based alert tuning.

• Strong communication capabilities with both technical and non-technical audiences.

• Demonstrated success in leading cross-functional initiatives under high-pressure conditions.

• Ability to promote collaboration across InfoSec, IT, and engineering teams.

• Forensic experience, including the investigation of incidents and preservation of digital evidence.

• Capability to leverage AI for automating and optimizing security operations workflows.

• Proficiency in designing and maintaining AI-assisted runbooks with human-in-the-loop validation.

• Ability to integrate security tools with AI platforms and APIs.

• Experience in improving vulnerability management and incident response workflows through intelligent prioritization and contextualization.

• Capacity to assess the accuracy, reliability, and security implications of AI-assisted decisions.

• At least Level 1 AI proficiency, utilizing AI on a daily basis to enhance personal productivity.

🏝️ Benefits

• Variable compensation and bonus incentives may be part of the total compensation package.

• Private company stock options may be included in the overall compensation.

• Additional benefits beyond the total compensation are available.

• Country-specific benefits vary by location.