
SecOps Engineer
Clipboard Health
- Location
- United States of America
- Posted
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Clipboard Health
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Nutrafol
Transform business requirements into technical solutions, enhance database design, and support data-driven decisions at Nutrafol as a Data Engineer. Work with cross-functional teams to gather insights and ensure high-quality data for strategic initiatives.
ClassDojo
Enhance and maintain ClassDojo's infrastructure; collaborate on technical improvements and support the platform used by millions of educators and students globally.
Check
Join Check as a Staff Engineer to tackle complex engineering challenges using modern tools like Python/Django, React/TypeScript, AWS/Terraform, and more. Work in a distributed team with opportunities for growth and impact while enjoying comprehensive benefits.
Array
Lead technical initiatives at Array's financial innovation platform, leveraging full-stack expertise and AI tools to build impactful products while mentoring developers and collaborating with cross-functional teams.
Gusto, Inc.
Join Gusto as a Software Engineer and shape the future of customer-facing products with scalable solutions.
Coursera
Backend Staff Engineer on Coursera's Learner Success team, developing personalized learning experiences using generative AI and rich learner data.
Shippo
Lead the development of billing, authentication, and fraud prevention systems at Shippo. Mentor engineers, set high standards, and collaborate on new products and capabilities.
Check
Join Check as a Staff Engineer to work with cutting-edge technologies, contribute to impactful projects, and enjoy excellent benefits including health insurance, stock options, flexible PTO, and stipends for remote work.
WatchGuard Technologies, Inc.
Lead client application development at WatchGuard as a Staff Software Engineer, utilizing your expertise in C#, .NET, WPF, and Windows Services to deliver robust solutions while mentoring team members and fostering innovation.
Eventbrite, Inc.
Join Eventbrite's team as a Staff Software Engineer and work on building impactful computer vision features using tools by Roboflow. Collaborate with a talented team and create innovative AI solutions that make the world programmable.
Vonage
Develop scalable real-time platform using Kotlin, AWS, Kafka & more, mentor junior engineers & drive innovation at Vonage.
Vonage
Real-time platform development for Network-based APIs using Kotlin, AWS, Kafka, Redis, and DynamoDb
Smartcar
Staff Software Engineer at Smartcar: Lead OEM integrations for vehicle manufacturers, develop high-performance APIs, and drive technical excellence.
Shippo
Backend Software Engineer II/III at Shippo: Develop new features, build infrastructure, and maintain current services for address validation, tracking, and pickups.
Nextech
Design and develop next-gen software for Nextech's product suite using C#, Angular, and SQL
Canonical
Engage with open-source communities as a Developer Relations Engineer at Canonical, fostering innovation and collaboration while leveraging Linux expertise.
Canonical
Join Canonical as a Developer Relations Engineer to engage with open-source communities, contribute to product development, and foster innovation while enjoying benefits like a distributed work environment, learning budget, and travel opportunities.
JumpCloud
Join JumpCloud's Platform Engineering organization as an experienced engineer, designing and implementing routing, load balancing, and communication strategies in a distributed microservice-based environment.
Zencore
Zencore is seeking a Cloud Engineer experienced in Google Cloud to provide strategic guidance and execute projects related to data and application modernization. The role involves leveraging various cloud technologies and tools while working in a collaborative, remote environment with competitive compensation and benefits.
Clipboard Health
Clipboard Health is seeking a founding Senior Security Operations Engineer to shape the future of their security operations. As the first hire, you will define and improve security processes and systems, focusing on operational security work, SIEM management, and incident response. You will lead investigations, automate workflows, and partner with IT teams to refine procedures. The role requires at least 5 years of security incident response experience, leading security incidents as an Incident Commander, and experience with major cloud providers like AWS or GCP. You will have high autonomy and trust in a fast-growing tech environment, with opportunities for growth and impact.
We are looking for a founding Senior Security Operations Engineer to join Clipboard Health and shape the future of our security operations. As the first hire in this function, you will have the unique opportunity to define and improve security operations processes and systems. This role will focus on operational security work at Clipboard, including bolstering our situational awareness, automating cloud security detection and response capabilities, improving the security posture of 3rd party tools, and ensuring that security issues are handled as they arise. The culture is high-autonomy and high-trust, valuing speed and impact. We are looking for candidates with SIEM management and security D&R experience in web and cloud environments.
This is a 100% remote role, open exclusively to individuals who are legally authorized to work within the United States.
Security Operations, Investigation, and Incident Response
Lead investigations into security alerts and reported security events in a cloud-based environment.
Automate investigation workflows and integrate tools to accelerate response times and reduce manual intervention.
Serve as the Incident Commander, driving response efforts during security incidents, from containment through recovery and post-mortem analysis.
Define, document, and continuously improve security operations playbooks to ensure rapid and effective handling of security events.
Partner with IT and support teams on refining procedures relating to security.
SIEM Management
Develop and implement SIEM detections and alerting mechanisms using Terraform, Datadog, and other security tools.
Onboard, enrich, and normalize diverse log sources across cloud environments, applications, and endpoints.
Collaborate with engineering teams to instrument deployed resources with tooling, enhance security auditing capabilities, and improve visibility in our environment.
Vulnerability Management
Manage vulnerability tracking and reporting, ensuring vulnerabilities are tracked and assigned across teams.
Negotiate acceptable remediation approaches and prioritization with owning teams.
Drive remediation efforts, ensuring timely and thorough patching of identified security weaknesses.
Vendor Platform & Service Security
Evaluate and enhance the security posture of third-party services and integrations (e.g., Google Workspace, Slack, Zapier), ensuring optimal configuration and ongoing monitoring.
Monitor and respond to phishing emails and other security threats within Google Workspace.
Need to Have:
At least 5 years of security incident response experience, such as working in a SOC or on a CIRT/DIRT team.
Experience leading security incidents as the incident commander.
Investigate security events, coordinating with other teams and organizations as needed.
Build high-confidence, low-noise security detections and alerts.
Experience with major cloud providers, such as AWS or GCP, and cloud technologies like Docker.
Comfortable with the Linux command line and able to use scripting languages to accelerate workflows, like Bash and Python.
Knowledge of web & cloud vulnerability categories and familiarity with CVSS.
Strong understanding of SaaS platform security, including access controls and phishing prevention.
Pragmatically balance business needs against security risk.
Clear written communication, including correspondence with internal stakeholders and third parties through documents, Slack messages, and emails.
Nice to Have:
Experience with infrastructure-as-code for writing detections, particularly Terraform.
Experience conducting vendor security reviews.
Ability to properly configure SAML SSO integrations.
Experience with systems administration or software development.
Experience working in high growth tech environments