Security Operations Engineer (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: US Remote; Jersey City, NJ. Remote and hybrid candidates are considered, but candidates living within a one-hour commute of a office must work onsite most of the time. The role may also require an onsite interview.
Salary: $140,971–$228,870 per year, with potential eligibility for bonuses, commissions, or other compensation.
Company
provides technology-enabled authentication, grading, vaulting, and sales services for trading cards, autographs, comics, coins, video games, tickets, and memorabilia.
What you will do
- Build, tune, test, and manage high-confidence detections across AWS, GCP, Okta, Google Workspace, Microsoft 365, and vendor platforms.
- Lead security incident triage, containment, forensics, remediation, and post-incident reviews as a senior responder.
- Conduct threat hunts across cloud, SaaS, identity, and on-premises environments using MITRE ATT&CK and attacker tradecraft.
- Design SOAR playbooks, integrations, and automation to reduce manual work and accelerate response.
- Own security telemetry pipelines, including log onboarding, parser and schema quality, coverage analysis, and data quality.
- Partner with infrastructure, platform, and engineering teams on secure architectures, vulnerability remediation, runbooks, and on-call improvements.
Requirements
- 5+ years of experience in security operations, incident response, or detection engineering, including at least 2 years in a senior cloud-native environment.
- Hands-on AWS security experience at scale, including IAM, CloudTrail, GuardDuty, Security Hub, EC2, EKS, and Lambda.
- Strong SIEM experience building detections, writing complex queries, and managing log pipelines.
- Proficiency in a general-purpose scripting or programming language, preferably Python, with experience building automation, integrations, and SOAR playbooks.
- Experience leading incident response, communicating with technical and executive audiences, and influencing cross-functional engineering work.
- Candidates must be authorized to work in the United States. Familiarity with PCI, NIST, ISO, or SOX compliance frameworks is required.
Nice to have
- Familiarity with GCP or Azure.
Culture & Benefits
- Medical, dental, and vision insurance for full-time employees.
- 401(k) matching, flexible paid time off, and ten company-paid holidays.
- Fertility, commuter, educational assistance, and employee discount benefits.
- Flexible schedules and participation in team celebrations and events.
- Shared on-call rotation with an emphasis on sustainable operations and continuous learning.
Hiring process
- Video interviews require cameras to be on; some steps may take place by phone.
- Remote candidates may be asked to participate in an onsite interview during the final stages.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →