Senior Security Operations Engineer

Overview

Senior Security Operations Engineer responsible for monitoring and responding to security events, leading incident response, and conducting digital forensic investigations. The role also supports security operations automation, runbooks, and process improvement.

What you'll do

• Monitor security events and technically analyze alerts.
• Lead information security incidents and employee investigations through closure.
• Develop incident response strategies and provide stakeholder updates.
• Deliver security guidance for incident response and insider threat initiatives.
• Coordinate services, integrations, and technology implementations supporting security operations.
• Create and maintain runbooks and automated workflows.
• Mentor security operations engineers on data collection, analysis, and reporting.

What you'll need

• 5+ years of experience in security incident response.
• Experience leading security incident response and coordinating across teams.
• Proficiency in Python for investigation scripts or tools.
• Forensics and analysis experience across macOS, Windows, and Linux.
• Experience using SIEM tools for log reviews.
• Experience with AWS, GCP, and cloud-based security services.
• Ability to communicate findings and strategies to technical, executive, and legal audiences.

Nice to have

• 3+ years of experience with insider threat initiatives or employee investigations.
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• GIAC Certified Incident Handler certification.
• Familiarity with NIST Cybersecurity Framework, ISO 27001, and FedRAMP.

Details

• Remote role for candidates in the US or Canada Pacific, Mountain, or Central Time Zones.
• Annual base salary: USD 135,481–227,700.
• Full-time position.