Senior Security Operations Engineer
United StatesSecurity EngineeringRemote8+ YOE
Summary
Senior Security Operations Engineer drives security projects, scales detection/response, manages vulnerability remediation, and threat hunts in cloud environments. Requires 8+ years experience with AWS/Azure security tools, containers, automation, and on-call rotations.
About the role
What you’ll be doing:
- Drive security projects that facilitate the business function and protect our customers, brand, & employees.
- Stay apprised of security trends and incidents to prevent similar occurrences by reviewing and implementing security controls based on lessons learned.
- Perform security reviews of infrastructure and product features ensuring high standards.
- Assist with updating policies and procedures in order to maintain our high security standards at Tines.
- Scale our detection and response capabilities across our environment and systems.
- Track and drive vulnerability remediation across production and corporate environments, partnering with engineering, infrastructure, and security teams to ensure timely resolution.
- Assist with security training and ensuring our employees are up to date on the latest security threats.
- Act as an escalation point for automated detections that are raised for human review.
- Proactively hunt for threats across our environment.
- Perform regular on-call duties, including incident commander responsibilities during security incidents.
- Ensure security controls are deployed and tested across cloud environments and corporate endpoints.
- Automate as much of this as possible using Tines!
What you bring with you:
- 8+ years in a security role managing complex cloud environments.
- Excellent written and verbal English skills.
- Deep familiarity with cloud security, including deploying, managing, securing, and monitoring services in AWS or Azure.
- Familiarity with securing container technologies like Docker, AWS ECS, and Kubernetes.
- Skilled in the use of AWS (or similar) security management and monitoring tools such as CloudTrail, GuardDuty, CloudWatch, Security Hub, Inspector, and Config.
- Experience with implementing and monitoring controls around security frameworks such as SOC2, ISO, CMMC, and FedRamp.
- Background of automating security tasks with SOAR tools and/or languages like Python/Go.
- Knowledge of command-line, log analysis, common attacks, and OS hardening for Linux and macOS.
- Experience working on an on-call rotation in a fast-paced environment.
- Excellent analytical & time management skills with the ability to work autonomously or collaboratively with peers.
Skills
AWSAzureKubernetesDockerAWS ECSCloudTrailGuardDutyCloudWatchSecurity HubInspectorPythonGoSOARLinuxmacOS