Sr. Security Operations Engineer, Incident Response

About This RoleAI processing…

Key Responsibilities

• 1
  Lead security incidents end-to-end, from detection and triage through containment, remediation, and post-incident review.
• 2
  Act as incident commander, driving clear decisions and alignment across teams during high-pressure situations.
• 3
  Conduct hands-on investigations across cloud and endpoint environments to determine root cause and impact.
• 4
  Partner with Observability & Automation to improve detections, reduce noise, and build automated response playbooks.
• 5
  Contribute to and refine incident response playbooks, runbooks, and documentation to improve readiness and consistency.
• 6
  Collaborate with Security, Infrastructure, and Product teams to identify gaps and strengthen the incident response lifecycle.
• 7
  Communicate effectively during incidents, providing clear updates to both technical and non-technical stakeholders.

Requirements

• 5+ years of experience in Security Operations or Detection & Response, with strong hands-on incident response in cloud environments (AWS and EKS experience strongly preferred).
• Proven ability to lead security incidents, including containment and remediation, in fast-moving environments.
• Strong investigative and analytical skills, with the ability to synthesize signals from multiple data sources.
• Experience with security tooling such as SIEM and EDR platforms (e.g., Splunk, Elastic, SentinelOne, CrowdStrike, or similar).
• Solid understanding of cloud security concepts and their application in real-world scenarios.
• Strong communication skills, with the ability to clearly convey information across technical and non-technical audiences.
• Experience building or improving automation for incident response workflows (e.g., scripting in Python; infrastructure-as-code is a plus).

Perks & Benefits