Senior Security Operations Engineer

Job Summary

Owning the security of tools, devices, identities, and data, the full-time remote Senior Security Operations Engineer will manage detection engineering, threat hunting, and security automation while leading corporate incident response and vulnerability management efforts.

Key responsibilities

• Own detection engineering and threat hunting in CrowdStrike Next-Gen SIEM, writing and tuning detections across various telemetry sources
• Lead corporate incident response as the technical lead, including forensics and communication with stakeholders during security events
• Implement and manage security automation workflows that connect identity, endpoint, email, and SaaS tools to enhance response efficiency

Required qualifications

• 5+ years of experience in security operations, detection and response, or security engineering, preferably in a SaaS environment
• Experience with detection engineering and threat hunting in a SIEM, such as CrowdStrike Next-Gen SIEM
• Proficiency in security automation and building SOAR playbooks, utilizing Python or PowerShell and REST APIs
• Strong background in incident response, including experience with cloud, identity, and SaaS environments
• Familiarity with identity security using Okta or similar providers, and managing access policies in a compliance-driven environment