Remote job
Senior Security Engineer - SecOps
Job details
About this role
Role overview Help protect products and services by detecting, investigating, and coordinating responses to security incidents across a global environment. You’ll work within an incident response team, lead incidents through containment and recovery, and strengthen the processes and tools that support continuous security operations. The role includes participation in an on-call rotation.
Responsibilities - Identify, investigate, and respond to security incidents; serve as incident commander when needed. - Maintain alerts, automated actions, playbooks, and escalation workflows for a 24/7 response capability. - Hunt for threats and develop approaches to counter sophisticated attackers. - Research threat intelligence, triage findings, and coordinate resulting response work. - Work with stakeholders across the organization to improve preparation, detection, analysis, containment, and post-incident review. - Participate in the on-call rotation.
Requirements - At least five years managing security incidents at global scale, or experience in a SOC, PSIRT, or CSIRT environment. - Strong experience with SIEM systems such as ELK, BigQuery, or Splunk; Splunk is preferred. - Hands-on experience with endpoint detection and investigation, including using EDR telemetry to determine root cause. - Experience with SOAR platforms such as Tines or Splunk SOAR. - Clear communication and leadership skills for coordinating with varied stakeholders. - Practical experience in software development or engineering operations for consumer products, and familiarity with cloud technologies such as Google Cloud, AWS, Heroku, or Azure.
Benefits and work setup The listing identifies the role as remote in the UK and provides a location-specific pay range. Benefits include medical, dental, and vision coverage, retirement contributions, wellness days and stipends, a home office stipend, professional development funding, paid parental leave, and other country-dependent benefits.