Security Operations Engineer

Collectors

. Build, tune, and manage high-confidence detections across AWS, GCP, Okta, GWS, M365, and vendor products .

Posted 10/16/2026full-timeRemote • United StatesMid-LevelSenior💰 $140,971 - $228,870 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security operations and incident response, with a strong focus on cloud-native environments and automation. Proficient in building and tuning detections, managing security data pipelines, and integrating security operations with engineering teams.

Highest-signal resume keywords

AWS Security ExpertiseIncident Response LeadershipSIEM ProficiencyAutomation and SOAR DevelopmentMITRE ATT&CK Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security OperationsIncident ResponseDetection EngineeringCloud SecurityPython ProgrammingLog Pipeline ManagementThreat HuntingAutomation DevelopmentVulnerability ManagementCompliance Frameworks

Soft Skills

Problem-SolvingCommunicationLeadershipNegotiationIndependence

Tools & Technologies

AWSGCPOktaM365SIEM ToolsCloudTrailGuardDutySecurity HubEKSLambda

Industry Keywords

MITRE ATT&CKPCI ComplianceNISTISOSOX Compliance

Tech Stack

Tools & technologies

AWSAzureCloudEC2Google Cloud PlatformPython

About the role

Key responsibilities & impact

Build, tune, and manage high-confidence detections across AWS, GCP, Okta, GWS, M365, and vendor products
Treat detections as code through version control, peer review, CI testing, and measurement against MITRE ATT&CK
Serve as a senior responder for security incidents, driving triage, containment, forensics, and remediation
Author post-incident reviews and convert lessons into durable improvements
Conduct proactive threat hunts across cloud, SaaS, identity, and on-premises infrastructure
Design and build automation and SOAR playbooks to reduce manual effort and accelerate response
Own and improve security data pipelines, including log source onboarding, parser and schema quality, coverage analysis, and data quality
Integrate automation for vulnerability identification, prioritization, and remediation
Partner with infrastructure, platform, and engineering teams on security operations requirements and cloud architecture decisions
Participate in a shared on-call rotation and improve runbooks, escalation paths, and alert quality
Champion company policies, including safety, attendance, and security

Requirements

What you’ll need

5+ years in security operations, incident response, or detection engineering
At least 2 years operating in a cloud-native environment at a senior level
Deep hands-on experience securing AWS at scale, including IAM, CloudTrail, GuardDuty, Security Hub, EC2, EKS, and Lambda
Familiarity with GCP or Azure is a plus
Strong SIEM proficiency, including building and tuning detections, writing complex queries, and managing log pipelines
Proficiency in one or more general purpose programming/script languages, preferably Python
Experience building automation, integrations, and SOAR playbooks from scratch
Seasoned incident responder able to lead under pressure and communicate with technical and executive audiences
Understanding of MITRE ATT&CK and cloud-specific attack paths
Experience influencing engineering roadmaps, negotiating with vendors, and representing security operations in cross-functional forums
Excellent problem-solving skills and ability to work independently and handle multiple tasks
Familiarity with PCI, NIST, ISO, and SOX compliance frameworks, and experience assisting in audits
Candidates must be authorized to work in the United States

Benefits

Comp & perks

Medical, Dental, and Vision insurance
Fertility assistance
Commuter assistance
Educational assistance
Competitive 401k matching plan
Flexible time-off for salaried employees
Ten company paid holidays
Discounts on select grading services for approved submissions
Flexible schedules with varying shifts
Celebrations, holiday events, and team building activities