Staff Security Engineer - SecOps & Threat

The Staff Security Engineer will be responsible for advancing security operations, responding to threats, and developing solutions that improve the overall security posture. Key responsibilities include:

• Execute security operations and threat management initiatives aligned with security strategy and roadmap objectives.


• Investigate and respond to complex security incidents, including system compromises, intrusion attempts, and denial-of-service attacks.


• Perform continuous monitoring, vulnerability assessments, and log analysis to identify and mitigate security risks.


• Collaborate with infrastructure, IT, cloud, application security, governance, and external teams to validate alerts and resolve incidents.


• Conduct root cause analysis and security forensics investigations following incidents.


• Research emerging threats, vulnerabilities, attack techniques, and security trends to proactively improve defenses.


• Design, develop, and maintain security tools, automation, and workflows that improve operational efficiency.


• Plan and execute threat exercises, adversary simulations, and security testing activities.


• Mentor security engineers and support the adoption of strong security practices across teams.


• Communicate security risks, findings, and mitigation strategies effectively to both technical and non-technical stakeholders.


• Maintain security documentation, including runbooks, workflows, dashboards, and knowledge resources.


• Participate in security operations on-call rotations and drive incidents through successful resolution.


• Support major security projects by defining milestones, tracking progress, and delivering measurable outcomes.

Requirements:

The ideal candidate should have strong experience in security operations, threat management, and security automation, with the ability to work independently and collaborate across teams. Required qualifications and skills include:

• 5+ years of experience working within a Security Operations, Threat Management, or similar security engineering function.


• 3+ years of experience developing security automation, tools, or operational workflows.


• 2+ years of experience conducting adversary emulation exercises or threat simulation activities.


• Hands-on experience with security technologies such as vulnerability scanners, SIEM, SOAR platforms, and cloud security tools.


• Experience working with cloud environments, particularly AWS or similar platforms.


• Strong understanding of security frameworks, standards, and methodologies including MITRE ATT&CK, STRIDE, PASTA, ISO 27001, SOC 2, GDPR, PCI, SOX, and NIST.


• Ability to analyze security events, investigate incidents, and perform technical root cause analysis.


• Strong programming or scripting skills for security automation and operational improvements.


• Experience translating technical security requirements into actionable remediation plans.


• Strong communication skills with the ability to present risks and recommendations to different audiences.


• Ability to prioritize effectively, manage multiple initiatives, and drive projects to completion.


• A bachelor’s degree in a related field is preferred.


• Relevant certifications such as CISSP, CISM, GIAC, or similar security credentials are highly desirable.

Benefits:

The role offers a supportive environment focused on professional growth, employee well-being, and long-term career development. Benefits include:

• Remote work flexibility with the equipment and support needed to succeed.


• Health coverage and wellness-focused programs.


• Paid parental leave and generous paid time off.


• Company holidays and additional self-care days.


• Stock options and opportunities to share in company growth.


• Access to learning and development resources, including professional training platforms.


• Wellness initiatives, employee communities, and inclusive team activities.


• Opportunity to work with experienced security professionals on impactful cybersecurity challenges.