Security Operations Engineer
Core
Build and tune security detections, investigate threats across cloud infrastructure and production environments, and develop AI-assisted security workflows to reduce operational risk.
Role type
hands-on individual-contributor security operations engineer
Builds
detection rules, log pipelines, AI-assisted investigation workflows, and incident response playbooks
Domain
Web3 infrastructure, cloud security, AI security
Deliverable
production ML models
Required skills
Python scripting, SIEM (Panther/Splunk), cloud security, incident response, threat hunting, AI tool validation, Linux systems, API automation
Preferred skills
AWS, Kubernetes, detection-as-code, SOAR, digital forensics, blockchain infrastructure security, agent security
Technologies
Python, Panther, Splunk, AWS, Kubernetes, Linux
Responsibilities
Triage alerts and hunt for suspicious activity across cloud and production systems; build and tune detection rules and log pipelines; participate in incident response and post-incident improvements; develop and validate AI-assisted security workflows; partner on vulnerability remediation and hardening; secure agent operations and tool access; share code, runbooks, and evaluation cases with the team; measure detection coverage and response metrics
Seniority
Senior, hands-on IC
