Senior Security Operations Engineer
Core
Monitor and respond to security events, lead incident response as Incident Commander, and conduct digital forensic investigations for Employee Relations, Legal, Compliance, or Information Security cases.
Role type
Senior Security Operations Engineer (Incident Response & Forensics)
Builds
Automated workflows, runbooks, and security services/integrations for incident response and insider threat initiatives.
Domain
Cybersecurity, Incident Response, Digital Forensics, Cloud Security
Required skills
Security incident response, digital forensics, Python scripting, SIEM log analysis, cloud security (AWS/GCP), macOS/Windows/Linux forensics, stakeholder communication, team mentorship
Preferred skills
Insider threat investigation, security frameworks (NIST, ISO 27001, FedRAMP), GCIH certification
Technologies
Python, SIEM, AWS, GCP, macOS, Windows, Linux
Responsibilities
Monitor security events and provide technical analysis on alerts; Lead information security incidents and employee insider investigations; Deliver security guidance for incident response and insider threat initiatives; Coordinate building of services and technologies to support security operations; Mentor security operation engineers on data collection and analysis; Participate in on-call rotation for high-severity incidents.
Seniority
Senior, hands-on IC
