Staff Security Engineer – Security Operations
GoodLeap
Posted: 10/21/2026AWSCloudDNSPythonTCP/IP
Senior SOC Analyst
Peraton
Posted: 10/21/2026CloudCyber SecurityLinuxSplunkTCP/IP
Staff Engineer, Security Operations
Apollo.io
Posted: 10/21/2026ApolloCloudGoogle Cloud PlatformPython
Network Operations Security Engineer
AXON Networks
Posted: 10/21/2026CloudDNSFirewallsGoogle Cloud PlatformKubernetesPythonTCP/IP
SOC Analyst
Thrive
Posted: 10/21/2026Cyber SecurityDNSLinuxSMTPSwitchingTCP/IPUnix
Senior Security Analyst, SOC
Gartner
Posted: 10/20/2026AWSAzureCloudCyber SecurityGoogle Cloud PlatformPythonSQL
Security Operations Administrator
Mission Technologies, a division of HII
Posted: 10/20/2026Security Analyst, SOC
Gartner
Posted: 10/20/2026AWSAzureCloudCyber SecurityGoogle Cloud PlatformPythonSQL
Risk Management Framework, Cyber Security Ops
Apogee Engineering, LLC
Posted: 10/20/2026Cyber SecurityTypeScript
Security Operations Analyst, Tier 2
Aristocrat
Posted: 10/20/2026AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinuxPython
Security Operations Engineer II
Credit Acceptance
Posted: 10/19/2026CloudCyber Security
Security Operations Analyst II
Rapid7
Posted: 10/19/2026LinuxMacOSSplunk
Security Operations Team Lead
Cyera
Posted: 10/17/2026AWSCloudPython
Lead SOC Engineer
OnTrac
Posted: 10/17/2026AWSCloudCyber SecurityFirewallsGoogle Cloud PlatformPython
Lead SOC Engineer
OnTrac
Posted: 10/17/2026AWSCloudCyber SecurityFirewallsGoogle Cloud PlatformPython
Security Operations Engineer
Collectors
Posted: 10/16/2026AWSAzureCloudEC2Google Cloud PlatformPython
Security Operations, Security Engineering
Rochester Regional Health
Posted: 10/16/2026
SOC Analyst I
AMERICAN SYSTEMS
Posted: 10/16/2026CloudCyber SecurityDNSLinuxSplunkTCP/IPUnix
SOC Analyst II
AMERICAN SYSTEMS
Posted: 10/16/2026CloudCyber SecurityDNSSplunkTCP/IP
Senior Business Analyst – Cyber Operations
EY
Posted: 10/16/2026SDLCSQL
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in cloud security, incident response, and detection engineering, with a strong focus on AWS security practices and automation. Proficient in managing security operations, conducting risk assessments, and mentoring teams to enhance security capabilities.
Highest-signal resume keywords
AWS Security ConfigurationDetection EngineeringIncident ResponseSIEM Query LanguagesCloud Security Monitoring
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Protect GoodLeap’s cloud environments, applications, endpoints, and corporate systems through detection engineering, incident response, and security operations
- Design, build, test, and tune detections across cloud, identity, endpoint, and email telemetry using detection-as-code practices mapped to MITRE ATT&CK
- Manage security logging, SIEM, and alerting pipelines
- Monitor AI tools, agents, MCP integrations, and API keys for data exposure, misuse, and anomalous behavior
- Lead investigation, containment, eradication, and recovery for security incidents
- Serve as incident lead for significant events and coordinate with legal, compliance, and leadership on regulatory notifications
- Maintain incident response plans, playbooks, and runbooks
- Conduct tabletop exercises and post-incident reviews
- Deploy and manage cloud security monitoring, WAF, DDoS protection, IDS, EDR, and email security tooling
- Build AI agents and automation for alert triage, enrichment, investigation, and response
- Review vulnerability scans and penetration testing results and propose remediation or mitigating controls
- Serve as an AWS cloud security subject matter expert and consult on secure cloud-system design
- Develop security requirements, conduct security risk assessments, and evaluate security services and technologies
- Mentor security and partner engineering teams
- Help mature GoodLeap’s security operations capability and own endpoint detection and response and email security
Requirements
What you’ll need- In-depth knowledge of Amazon AWS, including security configuration, logging, and tooling such as CloudTrail, GuardDuty, and Security Hub
- Hands-on experience in detection engineering, including SIEM query languages and detection-as-code
- Hands-on experience in incident response, including log analysis and host and cloud investigation
- Familiarity with the MITRE ATT&CK framework and OWASP Top 10
- Knowledge of TCP/IP, DNS, HTTP, HTTPS, and TLS
- Experience with or ability to quickly ramp on EDR platforms; CrowdStrike Falcon preferred
- Experience with or ability to quickly ramp on email security, including phishing, BEC, DMARC, SPF, and DKIM
- Experience building automation in Python or a similar language
- Experience building or integrating LLM-based agents and workflows
- Understanding of AI-specific risks such as prompt injection, data leakage, and excessive agent permissions
- Experience working in a SOC 2, PCI-DSS, or ISO control environment
- Ability to combine business acumen, technical acumen, and process expertise to assess requirements and alignment
- Strong verbal, written, ticketing, and messaging communication
- Ability to prioritize and deliver multiple tasks independently in a fast-paced environment
- GCIH, GCFA, GCDA, CCSP, CISSP, CrowdStrike, or comparable certifications are a plus
Benefits
Comp & perks- Bonus eligibility
- Equity eligibility
- Reasonable accommodations for known disabilities
- Collaborative work culture
- Rewarding career opportunities
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Detection-As-CodeLog AnalysisVulnerability ScanningPenetration TestingAutomation in PythonEDR PlatformsMITRE ATT&CK FrameworkOWASP Top 10TCP/IPDNS
Soft Skills
Strong CommunicationTask PrioritizationIndependent Delivery
Tools & Technologies
CloudTrailGuardDutySecurity HubCrowdStrike FalconWAFDDoS ProtectionIDSEmail Security ToolingAI AgentsMCP Integrations
Certifications & Qualifications
GCIHGCFAGCDACCSPCISSP
Industry Keywords
SOC 2PCI-DSSISO Control EnvironmentIncident Response PlansTabletop Exercises