Security Operations Engineer

Role overview

This role sits inside a global security operations function, building and running the controls, tooling, and automation that protect cloud and corporate environments. The position centers on configuring and integrating the enterprise security stack, engineering detection content, and turning manual security tasks into repeatable, version-controlled workflows. The work happens inside a regulated healthcare setting, where defensible controls and audit readiness are everyday concerns rather than afterthoughts.

Responsibilities

- Configure, integrate, and tune the enterprise security tooling stack spanning cloud and corporate environments - Engineer and maintain detection content, correlation rules, and response automation inside the SIEM and SOAR platform - Bring new log sources and telemetry feeds online, validating ingestion completeness, parsing accuracy, and field normalization - Administer and tune endpoint detection and response tooling, including policy configuration, exclusion governance, and coverage validation - Build security automation and infrastructure-as-code so controls are version-controlled, repeatable, and auditable - Implement policy-as-code and preventive guardrails through native cloud policy engines or an open policy framework - Support cloud security posture management across multiple providers, including deduplicating findings, mapping themes, and routing issues to owning teams - Supply technical guidance to system owners and apply fixes directly where a control is security-owned

Requirements

- Hands-on experience operating security tooling across major cloud providers such as Google Cloud, AWS, and Azure - Working knowledge of SIEM and SOAR platforms, including detection content engineering and automation - Familiarity with infrastructure-as-code, ideally Terraform or an equivalent framework - Understanding of endpoint detection and response administration, including policy and exclusion management - Comfort working in a regulated environment that follows formal frameworks such as HIPAA, ISO/IEC 27001, or SOC 2 - Ability to collaborate across cloud operations, platform, and application development teams, supplying technical guidance where needed

Nice to have

- Exposure to cloud security posture management tooling and the discipline of routing findings to the right owners - Experience hardening compute, storage, database, container, and serverless services against common threats - Comfort building API-based integrations that cut down manual handling and improve data quality

Benefits and work setup

- Remote working arrangement - Up to 10 percent domestic and international travel - Salary range of $110,000 to $120,000 USD, dependent on experience - Position does not offer visa sponsorship; candidates must already be authorized to work in the United States