Security Operations Lead
Summary
Lead L2 security operations in a cybersecurity startup, managing major-incident technical response, SIEM detection content/tuning, and log-pipeline health while deputizing for the L3 lead.
About Gruve
Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.
Position summary:
Senior L2 leading major-incident technical response until L3 engagement, owning the detection-content and tuning program day-to-day, and acting as deputy to the L3 Operations Lead.
Key responsibilities
- Lead technical response on major incidents (security and infrastructure) until L3 command engages.
- Own the detection-content backlog and tuning program execution with the L3 lead.
- Approve and execute high-risk changes; run problem management to eliminate recurring incidents.
- Own log-pipeline integration health: collectors, GCP Pub/Sub feeds, custom sources (Redfish listener,
- Aravolta webhooks, Hubble exporter) with escalation into engineering.
- Cross-train the L1 bench across towers; deputize for the L3 lead.
- Drive shift-quality audits and post-incident reviews.
Must-have
- 8–11 years with prior senior/lead experience in SOC and NOC and genuine cross-domain fluency.
- Incident command capability; deep SIEM content and query skills.
- Advanced network troubleshooting; automation mindset.
Good-to-have
- GCIH/GCIA, JNCIP, or CCIE written.
- MSSP/managed-services background; AI-SOC tooling exposure.
Why Gruve
At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.
Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.
As published by greenhouse
First Name, Last Name, Email, Phone, Resume/CV, Cover Letter
- Preferred First Name optional
- LinkedIn Profile optional
- Website optional
- Can you provide a link to your LinkedIn profile? optional
- Do you have a personal website or portfolio? If so, please share the link. optional
- Are you open to relocating for this position? choose one
- What is your current notice period?
- Do you currently, or will you in the future, require visa sponsorship to work here? choose one
- What are your salary expectations for this role?
- What is your permanent address? optional
- Are you comfortable working in an onsite setting? choose one
- I acknowledge my right to refrain from disclosing any confidential or proprietary information during the interview and understand that the company will not solicit such information, in accordance with the Non-Disclosure Agreement choose one
- I consent to the use of AI-powered note-taking tools during the interview process and acknowledge that the interview may be recorded and stored for evaluation purposes. choose one
- I hereby provide my consent to share my professional referees with Gruve and authorize Gruve, or its designated third-party representative, to contact them for the purpose of conducting business reference checks as part of the hiring process. choose one