SecOps Security Engineer (Staff-level, L6)

Build and own deeply technical security improvements across our Cloud Infrastructure(s) and associated territory (AWS/GCP, Kubernetes, CI/CD), including shipping production changes yourself when needed.

Design, implement, and iterate on detection and response capabilities (SIEM, EDR/MDR, cloud-native detections, CNAPP) with an engineer’s bias for automation, reliability, and measurable outcomes.

Hunt, investigate, and respond to security alerts and suspicious activity end-to-end (triage → containment → eradication → recovery → learnings), including writing tooling and detection logic to prevent recurrence.

Build internal security tooling and automations (IaC, scripts, integrations) that reduce toil and raise the security bar by default.

You’re a deeply technical security engineer with a builder/hacker mindset, able to go from idea → prototype → production and comfortable making changes directly in Cloud Infra / DevOps systems.

You have 5+ years of hands-on security engineering experience, ideally in a cloud-first SaaS environment.

Have worked in a fast-growing startup, scale-up and/or SaaS company

Cloud security engineering in AWS and/or GCP, with the ability to implement improvements hands-on (IAM, networking, compute, storage, logging).

Kubernetes security (cluster hardening, workload isolation, runtime security, policy controls) and container ecosystems.

DevOps fundamentals: CI/CD security, secrets management, artifact integrity, and secure-by-default platform patterns.

Incident response and investigation, including creating repeatable playbooks and automating response where appropriate.