Security Engineer III - Security Operations

📋 Description

• Plan and deliver end-to-end detection and response initiatives
• Build, tune, and maintain security detections across Elastic SIEM and AWS environments
• Manage the security investigation queue by triaging alerts, investigating suspicious activity, and
• Document incident investigations and findings clearly
• Develop and maintain runbooks and automation workflows using Python and no-code tools such as
• Make and document risk decisions within area of responsibility

🎯 Requirements

• Hands-on experience building, maintaining, and tuning SIEM detections (Elastic preferred, or
• Practical experience securing AWS environments and implementing cloud-native detection and response
• Proficiency in Python for scripting, automation, and security tooling
• Experience with Terraform or other infrastructure-as-code technologies
• Working knowledge of the MITRE ATT&CK framework
• Demonstrated experience triaging, investigating, and resolving security incidents

🎁 Benefits

• Remote work: Fully remote working environment within a globally distributed team
• Equity: Competitive share options
• Paid time off: Flexible holiday policy, with a minimum of 25 days to be taken
• Coworking access: Access to coworking spaces across major cities
• Team events: Workations and an annual company retreat
• Equipment: High-quality equipment suited to your role