Security Operations Engineer

Responsibilities

• Design, build, tune, test, and deploy threat detections and measure their fidelity over time.
• Operate and extend the detections-as-code pipeline using Terraform.
• Triage, investigate, and prioritize security alerts across endpoint, identity, cloud, and application telemetry.
• Conduct proactive threat hunting and establish root cause through log and telemetry analysis.
• Identify automation opportunities and build integrations that reduce manual incident response effort.
• Serve as Incident Commander on a shared rotation and coordinate response across Engineering, IT, Legal, and Privacy.
• Maintain incident response runbooks and playbooks, track incidents through closure, and report metrics to security leadership.
• Partner with Engineering, IT, Research, and Compliance to build and measure security automation.
• Participate in an on-call rotation.

Requirements

• 4+ years of experience in security operations, detection engineering, or incident response.
• Experience with detection-as-code or building response automation.
• Hands-on experience with threat detection, threat hunting, incident investigation, logs, and telemetry.
• Proficiency in at least one scripting language, preferably Python, and familiarity with common operating systems.
• Experience acting as or serving as deputy to the lead responder on at least one significant security incident.
• Proficiency with EDR and SIEM platforms and familiarity with enterprise tools such as Okta, AWS, CrowdStrike, SentinelOne, Datadog, Sumo Logic, or Splunk.
• Bachelor's degree in Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.
• Strong verbal and written communication skills, including the ability to brief technical and non-technical audiences under incident pressure.
• Preferred: experience applying AI-assisted tooling to triage, correlation, or investigation workflows.
• Preferred: experience in a regulated or privacy-sensitive environment such as health, genomics, or financial services.

Benefits

• Eligible for an additional on-call bonus.
• The San Francisco Bay Area base pay range is $130,000-$165,000.