Senior Security Operations Engineer
Core
Own threat detection and incident response from start to finish for a cloud-native platform, building security operations from first principles.
Role type
Senior Security Operations Engineer (Detection & Response)
Builds
Security operations capabilities, detection pipelines, and incident response playbooks
Domain
Cloud Security Operations
Deliverable
production ML models
Required skills
Threat detection, incident response, detection engineering, SIEM architecture, cloud forensics, security automation, threat hunting, Python, SQL
Preferred skills
SOC 2/ISO 27001/PCI audit experience, MDR/MSSP management, breach notification compliance, hiring/mentoring security teams
Technologies
AWS (CloudTrail, GuardDuty, VPC Flow Logs, Kubernetes audit logs), SIEM, EDR, SOAR
Responsibilities
Design and operate security operations across cloud, identity, endpoint, and SaaS; build security data pipelines; select and tune security tooling; write detections as code; lead incident response and run blameless post-incident reviews
Seniority
Senior, hands-on IC
