Security Operations Engineer
You will investigate and respond to security alerts across endpoints, cloud infrastructure, and network telemetry. You will contain and remediate confirmed incidents, maintain and tune SIEM and EDR detections, apply threat intelligence, automate repetitive workflows using AI, participate in on-call rotations, and document incidents and post-incident actions clearly.
Responsibilities
- Triage, investigate, and respond to security alerts across endpoints, cloud infrastructure, and network telemetry.
- Automate repetitive workflows and use AI to increase speed, scale, and effectiveness.
- Execute containment and remediation actions for confirmed incidents while improving runbooks.
- Tune and maintain SIEM and EDR detections to reduce false positives and close coverage gaps.
- Apply threat intelligence, including IOCs and TTPs, to investigations and monitoring.
- Participate in the on-call rotation and create actionable post-incident documentation.
Requirements
- 3+ years of experience in security operations, detection and response, or a related security engineering role.
- Experience investigating and responding to threats across endpoints, cloud environments, and network telemetry.
- Hands-on experience with SIEM and EDR platforms and tuning detections.
- Experience automating repetitive work and using AI to improve speed and scale.
- Ability to apply threat intelligence, including IOCs and TTPs, to investigations and proactive monitoring.
- Ability to participate in an on-call rotation and document incidents clearly.
Benefits
- Equity
- Bonuses based on individual and company performance