Sr Security Operations (SecOps) Engineer
Core
Define and drive security strategy for applications, cloud infrastructure, and engineering platforms by building reusable security platforms, automation, and intelligent controls.
Role type
Senior IC Security Operations Engineer (SecOps)
Builds
Scalable security controls, automation, and intelligent controls for software and AI-enabled systems
Domain
Cloud security, DevSecOps, and application security
Required skills
Threat modeling, security architecture design, DevSecOps implementation, vulnerability management, security automation, cloud security (AWS/GCP), container security, CI/CD integration, API development, Python/Go programming, Kubernetes security, IAM, secrets management, incident response, risk assessment, security metrics, AI/LLM security evaluation
Preferred skills
Cloud-native application security, reusable security controls design, security testing capabilities (SAST/DAST/SCA), security automation development, cross-organizational influence, ambiguous problem solving
Technologies
Python, Go, AWS, GCP, Kubernetes, CI/CD pipelines, infrastructure-as-code, SAST, DAST, SCA, container security tools, secrets management tools, observability platforms, engineering ticketing systems
Responsibilities
Lead security architecture reviews, threat modeling, and risk assessments for complex applications and cloud environments. Define security architecture patterns, engineering standards, and reusable controls. Design and drive scalable DevSecOps capabilities including SAST, DAST, and supply-chain security. Lead vulnerability management strategy including discovery, risk prioritization, and remediation guidance. Develop or guide development of security tooling and automation using Python, Go, or similar technologies. Partner with engineering teams on incident response and containment. Evaluate new security technologies and lead technical proofs of concept. Mentor engineers and raise security engineering expertise across teams. Design, prototype, and integrate AI-assisted capabilities for security analysis and remediation. Build integrations across source control, CI/CD, and observability systems.
Seniority
Senior, hands-on IC
