Senior Security Operations Engineer
Core
Build and run core detection and response capabilities, design security data pipelines, and lead incident response for a cloud-native platform.
Role type
Senior Security Operations Engineer (Detection Engineering & Incident Response)
Builds
Security operations tooling, detection-as-code, and incident response playbooks
Domain
Cloud security, Identity, Endpoint, SaaS
Deliverable
production ML models
Required skills
Threat detection, Incident response, Detection engineering, SIEM architecture, Cloud forensics, Security automation, Threat hunting, Log analysis, Python, SQL
Preferred skills
SOC 2/ISO 27001 compliance, MDR/MSSP management, Breach notification experience, Team mentoring
Technologies
AWS (CloudTrail, GuardDuty, VPC Flow Logs, Kubernetes audit logs), SIEM, EDR, SOAR
Responsibilities
Design and operate security operations across cloud, identity, endpoint and SaaS; Build security data pipelines to ingest and normalize logs; Write detections as code mapped to MITRE ATT&CK; Lead incident response and coordinate containment; Run blameless post-incident reviews.
Seniority
Senior, hands-on IC
