Senior Security Operations Engineer

Overview

Senior Security Operations Engineer responsible for monitoring and responding to security events, leading incident response, and conducting digital forensic investigations. The role also supports security operations automation, runbooks, and process improvements.

What you'll do

• Monitor security events and technically analyze alerts.
• Lead information security incidents and employee investigations through closure.
• Develop incident response strategies and provide stakeholder updates.
• Communicate security guidance for incident response and insider threat initiatives.
• Coordinate services, integrations, and technology implementations for security operations.
• Create and maintain runbooks and automated workflows.
• Mentor security operations engineers on data collection, analysis, and reporting.

What you'll need

• At least 5 years of security incident response experience.
• Experience leading security incident response and coordinating across teams.
• Proficiency in Python for building investigation scripts or tools.
• Experience with analysis and forensics on macOS, Windows, and Linux.
• Experience using SIEM tools for log reviews.
• Experience with AWS, GCP, and cloud-based security services.
• Ability to communicate findings and strategies to technical, executive, and legal audiences.

Nice to have

• At least 3 years of insider threat or employee investigations experience.
• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• GIAC Certified Incident Handler certification.
• Familiarity with NIST Cybersecurity Framework, ISO 27001, and FedRAMP.

Details

• Remote role for candidates in the United States or Canada Pacific, Mountain, or Central Time Zones.
• Annual base salary: USD 135,481–227,700.
• Full-time position.