Senior Security Operations Engineer

Responsibilities

• Build and run detection and response across cloud, identity, endpoint and SaaS
• Design and build security data pipelines into the SIEM or security data lake
• Own security operations tooling: SIEM, EDR, cloud threat detection and automation
• Write detections as code, map them to MITRE ATT&CK and measure coverage
• Lead incident response as incident commander and run blameless PIRs

Requirements

• 5+ years in security operations, detection engineering or incident response
• Hands-on cloud detection and response in AWS (CloudTrail, GuardDuty, VPC Flow Logs, Kubernetes audit logs)
• Depth in detection engineering, incident response, SIEM architecture, SOAR or threat hunting
• Engineering mindset with Python, SQL or SIEM query language
• Calm, clear communication under pressure

Preferred Qualifications

• Experience building SOC 2, ISO 27001 or PCI audit controls
• Experience managing an MDR or MSSP partner
• Familiarity with breach notification obligations
• Experience hiring or mentoring security staff

Benefits

• Immediate, large-scale impact on a high-growth business
• Top-of-the-market compensation packages
• Work alongside top regional talent

About the Company

• Rapidly scaling digital goods company with a cloud-native platform.