
SecOps Engineer
Clipboard Health
- Location
- United States of America
- Posted
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Clipboard Health
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
BPM LLP
IT M365 Engineer for Microsoft 365, Exchange, SCCM, Intune environments
Kontakt.io
Data Platform Engineer at Kontakt.io: Design & build scalable data infrastructure for real-time analytics & automation
Enode
Join Enode as a Junior Engineer and contribute to building sustainable energy solutions with a focus on TypeScript-based codebase and modern engineering practices.
Protegrity
Principal Integration Engineer at Protegrity: Develop integration solutions for customer deployments and maintenance, with expertise in cloud technology and DevOps + Scrum principles.
RevenueCat
Developer Support Engineer for RevenueCat SDK integration, flexible remote work, $112k salary, competitive equity & 10-year vesting
Xero
Join Xero as a Software Engineer to create innovative solutions for small businesses, leveraging modern technologies like C#, React, SQL Server, and AWS. Enjoy comprehensive benefits including health insurance, flexible work arrangements, and career growth opportunities.
Rewatch
Join Rewatch as a Senior Software Engineer to design and implement scalable video platform features using Ruby, JavaScript, and SQL. Collaborate with Product Design and support teams while enjoying comprehensive benefits including equity and remote work options.
Testlio
Senior Software Engineer at Testlio: Harness data & AI advancements to drive testing efficiency and shape the future of quality management.
Canonical
Join Canonical as a software engineer to help build the future of Ubuntu Server. Collaborate on open-source projects, maintain packages, and contribute to the development of a leading OS platform used globally in public clouds and enterprise environments.
Quantum Metric
Senior Software Engineer at Quantum Metric, building customer-facing applications using React, GraphQL, D3, and advanced browser APIs.
Enode
Senior Engineer at climate tech startup Enode, building scalable backend components and leading technical initiatives with TypeScript-based codebase.
OpenTable
Senior Software Engineer at OpenTable: Develop scalable restaurant applications with expertise in Java, Spring Boot, and database technologies.
JustAnswer
Design and develop solutions with a focus on performance, scalability, and quality using .NET, JavaScript, React, Redux, TypeScript, and JavaScript. Mentor peers and contribute to high-quality software delivery at JustAnswer.
Check
Join Check as a Software Engineer to build impactful solutions using modern tools like Python/Django, React/TypeScript, AWS, and Terraform. Lead end-to-end problem-solving, contribute to team growth, and enjoy excellent benefits including health insurance, stock options, flexible PTO, and more.
TrustArc
Design and implement scalable software solutions using Java, Scala, Spring Boot, and JavaScript frameworks at TrustArc. Mentor engineers, contribute to core platforms, and support global privacy management initiatives while enjoying competitive compensation and comprehensive benefits.
UpGuard
Join UpGuard as a Software Engineer to develop innovative cybersecurity solutions using modern technologies like React, Go, Kubernetes, and GCP. Enjoy hybrid or remote work options, competitive compensation, and a supportive team environment focused on creativity and well-being.
Check
Join Check as a Backend Engineer to build impactful solutions using Python/Django, React, TypeScript, AWS, and more. Lead problem-solving, contribute to team growth, and enjoy comprehensive benefits including health insurance, stock options, and flexible PTO.
Kayzen
Join Kayzen as a Senior Software Engineer to design scalable software components for real-time platforms and data pipelines. Work with industry experts in an agile environment with benefits like remote flexibility and professional development support.
Welocalize
Senior Software Engineer at Welocalize: Design scalable applications, implement RESTful APIs, and provide technical leadership.
Clipboard Health
Clipboard Health is seeking a founding Senior Security Operations Engineer to shape the future of their security operations. As the first hire, you will define and improve security processes and systems, focusing on operational security work, SIEM management, and incident response. You will lead investigations, automate workflows, and partner with IT teams to refine procedures. The role requires at least 5 years of security incident response experience, leading security incidents as an Incident Commander, and experience with major cloud providers like AWS or GCP. You will have high autonomy and trust in a fast-growing tech environment, with opportunities for growth and impact.
We are looking for a founding Senior Security Operations Engineer to join Clipboard Health and shape the future of our security operations. As the first hire in this function, you will have the unique opportunity to define and improve security operations processes and systems. This role will focus on operational security work at Clipboard, including bolstering our situational awareness, automating cloud security detection and response capabilities, improving the security posture of 3rd party tools, and ensuring that security issues are handled as they arise. The culture is high-autonomy and high-trust, valuing speed and impact. We are looking for candidates with SIEM management and security D&R experience in web and cloud environments.
This is a 100% remote role, open exclusively to individuals who are legally authorized to work within the United States.
Security Operations, Investigation, and Incident Response
Lead investigations into security alerts and reported security events in a cloud-based environment.
Automate investigation workflows and integrate tools to accelerate response times and reduce manual intervention.
Serve as the Incident Commander, driving response efforts during security incidents, from containment through recovery and post-mortem analysis.
Define, document, and continuously improve security operations playbooks to ensure rapid and effective handling of security events.
Partner with IT and support teams on refining procedures relating to security.
SIEM Management
Develop and implement SIEM detections and alerting mechanisms using Terraform, Datadog, and other security tools.
Onboard, enrich, and normalize diverse log sources across cloud environments, applications, and endpoints.
Collaborate with engineering teams to instrument deployed resources with tooling, enhance security auditing capabilities, and improve visibility in our environment.
Vulnerability Management
Manage vulnerability tracking and reporting, ensuring vulnerabilities are tracked and assigned across teams.
Negotiate acceptable remediation approaches and prioritization with owning teams.
Drive remediation efforts, ensuring timely and thorough patching of identified security weaknesses.
Vendor Platform & Service Security
Evaluate and enhance the security posture of third-party services and integrations (e.g., Google Workspace, Slack, Zapier), ensuring optimal configuration and ongoing monitoring.
Monitor and respond to phishing emails and other security threats within Google Workspace.
Need to Have:
At least 5 years of security incident response experience, such as working in a SOC or on a CIRT/DIRT team.
Experience leading security incidents as the incident commander.
Investigate security events, coordinating with other teams and organizations as needed.
Build high-confidence, low-noise security detections and alerts.
Experience with major cloud providers, such as AWS or GCP, and cloud technologies like Docker.
Comfortable with the Linux command line and able to use scripting languages to accelerate workflows, like Bash and Python.
Knowledge of web & cloud vulnerability categories and familiarity with CVSS.
Strong understanding of SaaS platform security, including access controls and phishing prevention.
Pragmatically balance business needs against security risk.
Clear written communication, including correspondence with internal stakeholders and third parties through documents, Slack messages, and emails.
Nice to Have:
Experience with infrastructure-as-code for writing detections, particularly Terraform.
Experience conducting vendor security reviews.
Ability to properly configure SAML SSO integrations.
Experience with systems administration or software development.
Experience working in high growth tech environments