Security Operations Lead

Job Summary

To build and run the SecOps function at a rapidly scaling AI infrastructure platform, the full-time Security Operations Lead will manage incident response, define detection and response programs, and operationalize security workflows while collaborating with cross-functional teams in a remote environment.

Key responsibilities

• Lead the deployment and ongoing operation of CrowdStrike across endpoint and cloud environments, ensuring comprehensive coverage
• Define and operate the detection and response program, including building detection content and establishing triage workflows
• Own the end-to-end incident response process, operationalizing the existing Security Incident Response Plan and leading post-incident reviews

Required qualifications

• 7+ years of experience in security operations, detection and response, or incident response
• Hands-on experience with EDR platforms, preferably CrowdStrike, including detection engineering and tuning
• Demonstrated leadership in incident response, including managing real incidents and executive communications
• Strong scripting and automation skills, particularly in Python and SOAR platforms
• Working knowledge of cloud security operations across AWS, GCP, or Azure