Security Operations Engineer
Core
Triage alerts, hunt for suspicious activity, and investigate threats across cloud, corporate, identity, endpoint, and production environments.
Role type
Senior IC Security Operations Engineer (Detection Engineering & Threat Hunting)
Builds
Detection rules, log pipelines, AI-assisted security workflows, and automated response playbooks
Domain
Cybersecurity, Cloud Security, AI Security
Deliverable
production ML models
Required skills
Python scripting, SIEM (Panther/Splunk), Cloud security, Identity management, Linux systems, Incident response, Threat hunting, Automation, AI tool validation, Mentoring
Preferred skills
AWS, Kubernetes, SOAR, Digital forensics, Threat intelligence, Attack simulation, AI-agent security, Blockchain infrastructure
Technologies
Python, Panther, Splunk, AWS, Kubernetes, Linux, AI-assisted workflows
Responsibilities
Triage alerts and hunt for suspicious activity; Build and tune detections and maintain log pipelines; Participate in security on-call and incident response; Automate evidence collection and response preparation using AI-assisted workflows; Evaluate AI-assisted workflows for false positives and failure modes; Partner with Infrastructure and IT on vulnerability remediation and hardening; Share reusable code, runbooks, and documentation while mentoring teammates.
Seniority
Senior, hands-on IC
