Staff InfoSec Engineer
Core
Lead the 24x7 Security Operations Center (CDU) for detecting, triaging, and responding to global security threats.
Role type
Staff InfoSec Engineer (Security Operations Lead)
Builds
Global security operations function, incident response capabilities, and detection automation
Domain
Cybersecurity / Security Operations
Required skills
Security operations leadership, incident response management, SIEM/SOAR platforms, EDR/XDR, cloud security monitoring, MITRE ATT&CK framework, team hiring and development, cross-functional stakeholder management, compliance audit management, automation/scripting
Preferred skills
SaaS security operations, threat hunting program maturity, Python/PowerShell scripting, CISSP/GCIH/GCFA/CISM certifications
Technologies
Crowdstrike, Daylight, Wiz, Splunk, Arnica, AWS, Azure, GCP
Responsibilities
Lead and manage 24x7 monitoring, detection, triage, and incident response functions; Hire, coach, and develop a team of analysts and incident responders; Conduct technical coaching, run mock drills, and build skill matrices; Own CDU metrics and KPIs and report program health; Drive continuous improvement of detection logic, playbooks, and automation; Serve as escalation point and incident commander for high-severity incidents; Manage relationships with outsourced/MSSP partners; Evaluate and select CDU tooling; Own audit, compliance, and customer trust requirements; Build and maintain incident response runbooks and post-incident review processes; Participate in on-call rotation for incidents
Seniority
Staff, hands-on leadership with strategic vision
