Staff Security Engineer - Security Operations

10+ years of experience in information security, with 7+ years focused on security operations — spanning detection engineering, incident response, threat hunting, or SecOps programme leadership.

Deep expertise in architecting and operating enterprise-grade SIEM and SOAR platforms at scale (e.g., Chronicle, Splunk, Elastic SIEM, Palo Alto XSOAR, Tines).

Strong hands-on background in cloud-native security across GCP and/or AWS — including logging pipelines, cloud security posture management, and IAM monitoring.

Expert-level knowledge of attack techniques and threat actor tradecraft (MITRE ATT&CK, MITRE D3FEND) and the ability to translate that into detection logic and response procedures.

Demonstrated experience leading major incident response — including managing stakeholders, running cross-functional war rooms, and driving post-incident improvement.

Proficiency in scripting and automation (Python, Bash, or equivalent) applied to security engineering problems — not just tooling configuration.

Experience owning or materially contributing to EU regulatory compliance requirements (GDPR, NIS2) from an operational security perspective.

Track record of influencing technical direction beyond your immediate team — through design reviews, architecture documents, or cross-functional programme leadership.

Excellent written and verbal communication skills with the ability to present technical risk clearly to both engineering audiences and executive leadership.

Holding one or more recognized security certifications: CISSP, CISM, GIAC (GCIA, GCED, GREM, GDAT), OSCP, or a cloud security specialty certification (GCP Professional Cloud Security Engineer, AWS Security Specialty).

Experience building or scaling a detection engineering programme from the ground up, including establishing detection coverage metrics and a continuous improvement cadence.

Hands-on with threat intelligence platforms (e.g., Recorded Future, Mandiant Advantage) and structured intelligence lifecycle management.

Background in abuse monitoring, phishing detection, and takedown coordination with registrars, hosting providers, and law enforcement.

Exposure to bug bounty programme operations and red team/purple team collaboration to validate detection coverage.

Experience managing security vendor relationships, running RFPs, and making build-vs-buy decisions for operational tooling.

Prior experience working within the Irish or EU regulatory environment — familiarity with the Data Protection Commission (DPC), NIS2 obligations for essential/important entities, or ENISA guidance is a plus.

We have all the usual perks and benefits but what we can really offer you is a fantastic work environment powered by an amazing team.

Industry competitive compensation and equity plan

Robust Vacation Package with 28 days of Holiday

Private medical and dental coverage

Life and Critical illness insurance

Attractive Workplace Pension scheme

Access to Employee Resource Platform

Top-of-line equipment

Monthly allowance for wellness, reading and access to LinkedIn Learning for continued development

Events and activities both team-based and company wide that inspire, educate and cultivate

Pantheon is an equal opportunity employer and we welcome applications from all backgrounds regardless of race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity, veteran status, disability, or any other classification protected by law. Pantheon complies with federal and local disability laws and makes reasonable accommodations for applicants and employees with disabilities. If you need a reasonable accommodation due to a disability for any part of the interview process, please contact talent@pantheon.io.

To review the Employee and Applicant's Privacy Policy, click here.

Visa Sponsorship is not available at this time.