Staff Security Engineer - SecOps & Threats

Overview

Staff Security Engineer on 6sense's Security Operations and Threat Management team, protecting the company through prevention, detection, investigation, and response to business-impacting security events, incidents, and threats.

What you'll do

• Execute on milestones for end-to-end SecOps and Threat initiatives in accordance with the Security roadmap.
• Identify and respond to complex security incidents, including system compromise, intrusion attempts, and/or denial of service attacks, by conducting continuous monitoring, vulnerability assessments, and log analysis.
• Engage vendors, Infrastructure, IT, GRC, Cloud, and Application Security teams as required to validate alerts, ensure incident resolution, and perform root cause analysis.
• Research emerging threats, publicly disclosed vulnerabilities or attack vectors, and proactively push mitigating controls to products and services.
• Perform security forensics.
• Build security tools and advanced automation that enable the 6sense Security Team to operate at speed and scale.
• Propose, plan, lead, and execute threat exercises based on current security trends, advisories, publications, and academic research.
• Mentor engineers across Information Security to drive security controls and risk remediation.
• Communicate risks and mitigations across multiple audiences with varying levels of sensitivity.
• Execute on quarterly individual Key Results that support team Objectives (OKRs).
• Maintain up-to-date knowledge of 6sense's product, environment, systems, and architecture.
• Actively prepare for weekly 1:1s with Manager and monthly skip levels.
• Take part in the Security Operations on-call rotation.
• Mitigate security exposures.
• Drive incidents to closure within established SLAs.
• Participate in creation of milestones associated with major security projects, and execute on those milestones.
• Develop and maintain up-to-date handbook pages, runbooks, workflows, and dashboards.
• Provide project status updates on a weekly basis.

What you'll need

• 5+ years of experience being part of a Security Operations or similar team.
• 3+ years of experience developing automation.
• 2+ years of experience conducting adversary emulation exercises.
• Experience with security tools and cloud environments (e.g., Vulnerability Scanners, SIEM, SOAR, AWS).
• Experience with industry frameworks, regulations, and standards, such as: MITRE ATT&CK, STRIDE, PASTA, ISO 27001, SOC 2, GDPR, PCI, SOX, NIST, etc.

Nice to have

• Bachelor's degree in a related field.
• Relevant industry certifications, such as CISSP, CISM, or GIAC, are highly desirable.

Details

• Location: United States, Remote.
• Full-time employee benefits include health coverage, paid parental leave, paid time off and holidays, quarterly self-care days, and stock options.