Senior Security Operations Engineer

Role overview This is a senior role on a Security Operations team supporting an internet-of-things platform used across physical-operations industries. The work centers on monitoring and responding to security events, leading incidents as Incident Commander, and conducting digital forensic investigations in support of Employee Relations, Legal, Compliance, and Information Security cases. The position also involves building runbooks, automated workflows, and refining operational processes alongside a global team of engineers and analysts. The role is open to candidates residing in the US Pacific Time Zone.

Responsibilities - Monitor security events and provide technical analysis on alerts, escalating and triaging as needed. - Lead information security incidents and employee investigations end-to-end, setting the response strategy, driving execution through closure, and providing updates to key stakeholders throughout the incident. - Conduct digital forensic investigations in support of legal, compliance, and insider threat matters. - Coordinate the building of services, integrations, and tooling that support security operations, incident response, and insider threat programs. - Create and maintain runbooks and automated workflows, and assist in process refinement and implementation. - Mentor and train other security operations engineers on data collection, analysis, and reporting.

Requirements - 5+ years of experience in security incident response, including practical experience leading incidents and coordinating across teams. - Ability to communicate investigative findings and strategies clearly to technical staff, executive leadership, and legal stakeholders. - Proficiency in Python for building scripts and tools that support investigation processes. - Demonstrated ability to deliver concise security guidance on incident response and insider threat initiatives. - Strong collaboration skills and a practical, humble approach to working with diverse teams across the company.

Benefits and work setup - Flexible working model with offices available for those who prefer in-person collaboration and remote options where operationally feasible. - US Pacific Time Zone residency required; roles may indicate specific geographic or office-adjacency needs where applicable.