Skip to content
FrontFrontSan Francisco, CA

Security Operations Engineer

Protects the company’s customers, employees, and platform by leading incident response, improving detection coverage, automating security operations, and hardening cloud, endpoint, identity, and SaaS environments. Requires 5+ years of security operations or related experience and strong cross-functional communication.

180k – 260k/yr
Hybrid5+ YOESecurity Engineering

About the role

Responsibilities

  • Own end-to-end security incident response, including triage, containment, eradication, recovery, and post-incident learnings.
  • Build and continuously improve detection coverage across cloud, endpoint, identity, and SaaS systems.
  • Develop security automation and workflows to reduce manual toil and improve response speed.
  • Lead investigations into suspicious activity, account compromise, and potential data exposure events.
  • Partner with Engineering and IT to harden systems, improve logging and telemetry, and close recurring control gaps.
  • Drive readiness through tabletop exercises, runbooks, metrics, and operational reviews.
  • Manage and tune security tooling, including SIEM, EDR, IAM, and alerting platforms, to reduce noise and increase fidelity.
  • Communicate clearly during high-severity situations, aligning stakeholders on impact, status, and next steps.

Requirements

  • 5+ years of experience in Security Operations, Incident Response, Detection Engineering, or similar security roles.
  • Strong understanding of attacker techniques and defensive strategies across cloud, endpoint, identity, and network surfaces.
  • Hands-on experience with SIEMs, EDR platforms, and investigation workflows, including log querying and alert tuning.
  • Ability to use AI tools to streamline security operations and response.
  • Experience building incident response processes, playbooks, and operational metrics that scale with company growth.
  • Strong cross-functional collaboration skills, with the ability to influence Engineering and IT partners without relying on authority.
  • Calm, structured decision-making under pressure, with strong written incident communication.
  • Ability to use AI tools to accelerate investigations through summarization, clustering, and query generation while validating outputs and protecting sensitive data.

Compensation and Benefits

  • Annual salary range of $180,000–$260,000.
  • Option to work from the San Francisco office on Tuesdays, Wednesdays, and Thursdays; in-office attendance is not required.

Skills

Incident Responsesecurity operationsdetection engineeringSIEMedrIAMCloud Securitylog queryingalert tuningsecurity automationthreat detectionAI Tools

Similar roles

Security Engineering jobs
Polymarket

Cloud Security Engineer

PolymarketNew York, NY

Own and improve Polymarket's AWS security posture by designing and enforcing security controls in infrastructure code, managing cloud telemetry and detection, and driving compliance. Requires 4+ years cloud security experience, deep AWS expertise, and IaC skills.

180k – 250k/yrRemote4+ YOESecurity Engineering
Lightning AI

Network Security Engineer

Lightning AISan Francisco, CA +1

Designs and implements network security architectures using firewalls, VPNs, and IDS/IPS. Conducts vulnerability assessments, monitors threats with SIEM tools, ensures compliance, and automates security responses. Requires expertise in security tools and certifications like CISSP.

180k – 220k/yrHybridSecurity Engineering
Replit

Product Security Engineer (PSIRT - Product Security Incident Response Team)

ReplitFoster City, CA

Leads vulnerability response for cloud-native AI platform, managing intake, triage, validation, remediation coordination, and bug bounty programs. Requires expertise in reproducing web/app/cloud vulnerabilities and operating disclosure processes.

180k – 325k/yrHybridSecurity Engineering
Fireworks AI

MTS, Security

Fireworks AISan Mateo, CA

Security Engineer designing and building security controls, tooling, and automation for AI infrastructure, multi-cloud platforms, Kubernetes, and LLM serving at Fireworks AI. Requires 3-7 years experience in security or infrastructure engineering, proficiency in Python/Go, and deep cloud-native and Kubernetes knowledge.

180k – 220k/yrOn-site3+ YOESecurity Engineering
OpenAI

Security Engineer, Infrastructure Security

OpenAISan Francisco, CA +3

Designs and builds security controls for infrastructure including GPU clusters, multi-cloud setups, datacenters, Kubernetes, and networks to protect AI models and data from advanced threats. Requires deep security expertise, cloud platform knowledge, and proactive problem-solving across on-prem and cloud environments.

184k – 385k/yrRemoteSecurity Engineering