Senior Security Operations Engineer

Role overview Own and improve corporate security operations across workforce identities, devices, email, SaaS tools, and data. This hands-on engineering role connects security systems, builds detections and automated responses, and leads investigations when incidents are escalated by an external monitoring team.

Responsibilities - Build and tune detections across identity, endpoint, email, and SaaS telemetry; onboard log sources and support threat hunting. - Connect security tools and workflows so signals trigger investigation, containment, paging, and ticketing, using automation and AI agents where useful. - Lead corporate incident response, including scoping exposure, conducting forensics, communicating guidance, and tracking root-cause fixes. - Manage endpoint protection, device trust checks, software inventory, and escalations with the managed security operations provider. - Own authentication, MFA, session, and privileged-access policies; work with compliance partners on access reviews and audit evidence. - Improve protections for data, email, SaaS applications, developer tools, and AI use; coordinate with IT operations, compliance, and product security.

Requirements - Experience in security operations engineering, including detection, incident response, and threat investigation across cloud, identity, or SaaS environments. - Experience working with an MDR or managed SOC provider and taking ownership of escalated incidents. - Practical identity security experience, including authentication policies, privileged access, and access reviews in a controlled environment. - Endpoint security experience, including macOS, device trust, and endpoint investigation tools; familiarity with email security and SaaS security posture is also relevant. - Experience designing or operating data loss prevention, including policy tuning and investigating potential exposure. - Ability to secure developer tools and software supply chains, and to explain security risk clearly to technical and non-technical audiences.

Nice to have - Experience governing organizational AI use, including agent access, data exposure, prompt-injection risks, and AI security monitoring. - Experience building AI agents or LLM-based automations for alert triage, enrichment, or investigation.

Benefits and work setup Remote-friendly work setup. Benefits include health, dental, and vision coverage; retirement matching; equity; paid time off and holidays; parental leave; disability coverage; and professional development and wellbeing funds.