Senior Security Operations Engineer

Role overview

Senior Security Operations Engineer embedded on a global security team responsible for monitoring, investigating, and responding to security events across cloud and corporate environments. The role spans acting as Incident Commander for security incidents and leading digital forensic investigations that support Employee Relations, Legal, Compliance, and Information Security cases, alongside runbook creation, automation, and ongoing process refinement.

Responsibilities

- Monitor security events and provide technical analysis on alerts from detection tooling - Serve as Incident Commander during information security incidents and employee investigations, setting strategy and providing stakeholder updates through closure - Deliver clear, concise security guidance for incident response and insider threat initiatives - Coordinate services, capabilities, integrations, and technology implementations that support security operations, incident response, and insider threat programs - Maintain runbooks and automated workflows, and assist in ongoing process refinement

Requirements

- 5+ years of experience in security incident response - Demonstrated ability to communicate investigative findings and strategy to technical staff, executive leadership, and legal stakeholders - Proficiency in Python with the ability to build scripts and tools that support investigation workflows - Practical experience leading end-to-end incident response, including alert monitoring, triage, and cross-team coordination - Experience mentoring engineers on data collection, analysis, and technical reporting

Nice to have

- Background leading digital forensic investigations tied to employee relations, legal, or compliance matters - Familiarity with insider threat program development and tooling

Benefits and work setup

- Remote within the United States, anchored to the Pacific Time Zone - Flexible working model supporting office-based, hybrid, and remote arrangements based on operational needs