Staff Security Operations Engineer

Lead security operations monitoring and threat detection across multi-cloud and hybrid environments, optimizing SIEM and SOAR platforms with custom detections and automated responses.

Act as technical lead for incident response and digital forensics, managing high-severity incidents end-to-end and conducting forensic investigations and tabletop exercises.

Drive security automation by integrating controls into CI/CD pipelines and developing scripts to streamline security tasks and improve response times.

8-10 years of cybersecurity experience with at least 5 years in Security Operations (SOC), Incident Response, or DevSecOps.

Hands-on expertise with enterprise SIEM (Splunk, Microsoft Sentinel, Elastic) and SOAR (Palo Alto XSOAR, Swimlane, Tines) platforms.

Strong scripting skills in Python, PowerShell, Bash, or Go for automation and API integrations.

Experience securing cloud infrastructures (AWS, Azure, GCP) and familiarity with cloud-native security tools.

Experienced leader capable of managing high-impact security incidents and directing cross-functional technical investigations under pressure.

Proficient in integrating security operations with DevOps practices including infrastructure-as-code and container security.

Skilled at optimizing detection and response workflows using threat intelligence and behavioral analytics within complex, multi-cloud environments.