Security Engineer III - Security Operations

📋 Description

• Plan and deliver end-to-end detection and response initiatives, from creating detection rules to
• Build, tune, and maintain security detections across Elastic SIEM and AWS environments, identifying
• Manage the security investigation queue by triaging alerts, investigating suspicious activity
• Document incident investigations and findings clearly to support follow-up actions, knowledge
• Develop and maintain runbooks and automation workflows using Python and no-code tools such as
• Make and document risk decisions within your area of responsibility, escalating issues when

🎯 Requirements

• Hands-on experience building, maintaining, and tuning SIEM detections. Experience with Elastic is
• Practical experience securing AWS environments and implementing cloud-native detection and response
• Proficiency in Python for scripting, automation, and security tooling.
• Experience with Terraform or other infrastructure-as-code technologies.
• Working knowledge of the MITRE ATT&CK framework and its application to threat detection and
• Demonstrated experience triaging, investigating, and resolving security incidents.

🎁 Benefits

• Remote work: Fully remote working environment within a globally distributed team.
• Equity: Competitive share options.
• Paid time off: Flexible holiday policy, with a minimum of 25 days to be taken.
• Coworking access: Access to coworking spaces across major cities.
• Team events: Workations and an annual company retreat.
• Equipment: High-quality equipment suited to your role.