Senior Security Operations Engineer

This role is for someone who thrives in ambiguity, can move quickly from signal to action, and enjoys building durable systems and playbooks — not just fighting fires. You’ll partner closely with Engineering, IT, Legal, and Business leaders to reduce risk, respond to incidents, and continuously raise the security bar across the company.
What will you be doing?
• Own end-to-end security incident response, including triage, containment, eradication, recovery, and post-incident learnings.
• Build and continuously improve detection coverage across cloud, endpoint, identity, and SaaS systems.
• Develop security automation and workflows to reduce manual toil and improve response speed.
• Lead investigations into suspicious activity, account compromise, and potential data exposure events.
• Partner with Engineering and IT to harden systems, improve logging/telemetry, and close recurring control gaps.
• Drive readiness through tabletop exercises, runbooks, metrics, and operational reviews.
• Manage security tooling configuration and tuning (SIEM, EDR, IAM, alerting) to reduce noise and increase fidelity.
• Communicate clearly during high-severity situations, aligning stakeholders on impact, status, and next steps.

What skills and experience do you need?
• 5+ years of experience in Security Operations, Incident Response, Detection Engineering, or similar security roles.
• Strong understanding of attacker techniques and defensive strategies across cloud, endpoint, identity, and network surfaces.
• Hands-on experience with SIEMs, EDR platforms, and investigation workflows (including log querying and alert tuning).
• Ability to AI tools to streamline security operations and response.
• Experience building incident response processes, playbooks, and operational metrics that scale with company growth.
• Strong cross-functional collaboration skills, with the ability to influence Engineering and IT partners without relying on authority.
• Calm, structured decision-making under pressure, with strong written incident communication.
• AI fluency: ability to use AI tools to accelerate investigations (summarization, clustering, query generation) while validating outputs and protecting sensitive data.