Security and Threat Operations Engineer

Overview

Security and Threat Operations Engineer focused on turning production signals into detections, responses, and hardening for a fast-moving fintech environment.

What you'll do

• Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments.
• Review API, authentication, and WAF telemetry to identify malicious activity and anomalous behavior.
• Use AI responsibly to support triage, analysis, and workflow automation with defined guardrails.
• Operate vulnerability management by triaging, prioritizing, and driving remediation for findings from Wiz and related workflows.
• Develop Python-based tooling and automation for investigations and operational scale.
• Investigate security events end to end, including triage, scoping, containment support, and remediation follow-through.

What you'll need

• 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response.
• Strong experience investigating suspicious activity across web, API, authentication, and infrastructure telemetry.
• Strong Python programming skills for maintainable automation and security tooling.
• Experience building and tuning detections in a SIEM/detection platform and working with observability/logging systems.
• Experience operating or supporting a vulnerability management program.
• Familiarity with cloud and application security findings from platforms such as Wiz.

Details

• Location: United States (Remote).
• On-call: participates in a 24x7 security incident response rotation.