
SecOps Engineer
Clipboard Health
- Location
- United States of America
- Posted
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Clipboard Health
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Binance
Join Binance as a Frontend Engineer and shape the future of blockchain with a user-centric global organization.
saas.group
Manual QA Engineer at Prerender - 100% remote, flexible time off, small team
Remofirst
Manual QA Engineer at Remofirst: Create test plans, perform manual & automated testing, and participate in software development life cycle.
G-P
Sr. Software Engineer at G-P: Design & develop cloud platform, advocate for modern agile methodologies, build scalable enterprise-level services.
G-P
Sr Software Engineer at G-P: Design cloud-enabled products for Global Growth Platform, collaborate with stakeholders & mentor engineers.
brightwheel
Join Brightwheel's Billing and Payments pod as a Sr. Full-Stack Engineer, working on timely payments for Early Childhood Education centers. Enjoy high ownership, autonomy, and a competitive compensation package.
Andela
Staff Engineer - Frontend at Andela: drive technical excellence, establish frontend architecture standards, and mentor engineers in a fully remote work culture.
Staff Engineer (Tech Lead) for Reddit Pro team, leading cross-functional teams to deliver high-quality products and features.
Phantom
Join Phantom as a Security Engineer and contribute to the development of a secure self-custodial wallet for the crypto ecosystem.
Scribd
Senior Security Engineer at Scribd: Configure and integrate security tooling, analyze security findings, and perform incident response.
Udacity
Design and develop data solutions using Apache Spark, Scala, Airflow, Postgres, and Redshift on AWS
Nuna
Design and implement scalable data platforms for value-based care at Nuna. Work on production-hardened systems, mentor junior engineers, and collaborate with a team to drive innovation in healthcare technology.
Wealthfront
Design and maintain core datasets at Wealthfront, collaborate with cross-functional teams, ensure high-quality data for impactful decision-making, and contribute to building a best-in-class data infrastructure.
Goodnotes
Data engineer position at Goodnotes, building data pipelines and analytics infrastructure with expertise in ETL, ELT, distributed systems, and big data solutions.
Kueski
Data Engineer en Kueski: Diseña soluciones sólidas y escalables basadas en datos para respaldar las necesidades a largo plazo de los consumidores de datos. Salario competitivo, bienestar y tiempo de trabajo flexible.
Workiva
Design and develop scalable data pipelines using Airbyte, Kafka, and Snowflake. Build modular transformations with dbt and optimize data serving layers for high-performance data products. Collaborate with cross-functional teams and drive innovation in data engineering technologies at Workiva.
Trafilea
Build and maintain data pipelines using Apache Airflow and AWS technologies at Trafilea. Collaborate with architects to ensure best practices in data engineering while contributing to the company's growth through scalable solutions.
Zencore
Join Zencore as a Data Engineer to leverage your expertise in Google Cloud and cloud-native tools to help companies transform their data infrastructure. Work with cutting-edge technologies like BigQuery, Snowflake, Spark, Hadoop, and Apache Airflow while collaborating with innovative teams. Enjoy competitive compensation and remote work flexibility.
Coursera
Join Coursera's Data Engineering team as a Senior Data Engineer and shape the future of data-driven decision-making.
Clipboard Health
Clipboard Health is seeking a founding Senior Security Operations Engineer to shape the future of their security operations. As the first hire, you will define and improve security processes and systems, focusing on operational security work, SIEM management, and incident response. You will lead investigations, automate workflows, and partner with IT teams to refine procedures. The role requires at least 5 years of security incident response experience, leading security incidents as an Incident Commander, and experience with major cloud providers like AWS or GCP. You will have high autonomy and trust in a fast-growing tech environment, with opportunities for growth and impact.
We are looking for a founding Senior Security Operations Engineer to join Clipboard Health and shape the future of our security operations. As the first hire in this function, you will have the unique opportunity to define and improve security operations processes and systems. This role will focus on operational security work at Clipboard, including bolstering our situational awareness, automating cloud security detection and response capabilities, improving the security posture of 3rd party tools, and ensuring that security issues are handled as they arise. The culture is high-autonomy and high-trust, valuing speed and impact. We are looking for candidates with SIEM management and security D&R experience in web and cloud environments.
This is a 100% remote role, open exclusively to individuals who are legally authorized to work within the United States.
Security Operations, Investigation, and Incident Response
Lead investigations into security alerts and reported security events in a cloud-based environment.
Automate investigation workflows and integrate tools to accelerate response times and reduce manual intervention.
Serve as the Incident Commander, driving response efforts during security incidents, from containment through recovery and post-mortem analysis.
Define, document, and continuously improve security operations playbooks to ensure rapid and effective handling of security events.
Partner with IT and support teams on refining procedures relating to security.
SIEM Management
Develop and implement SIEM detections and alerting mechanisms using Terraform, Datadog, and other security tools.
Onboard, enrich, and normalize diverse log sources across cloud environments, applications, and endpoints.
Collaborate with engineering teams to instrument deployed resources with tooling, enhance security auditing capabilities, and improve visibility in our environment.
Vulnerability Management
Manage vulnerability tracking and reporting, ensuring vulnerabilities are tracked and assigned across teams.
Negotiate acceptable remediation approaches and prioritization with owning teams.
Drive remediation efforts, ensuring timely and thorough patching of identified security weaknesses.
Vendor Platform & Service Security
Evaluate and enhance the security posture of third-party services and integrations (e.g., Google Workspace, Slack, Zapier), ensuring optimal configuration and ongoing monitoring.
Monitor and respond to phishing emails and other security threats within Google Workspace.
Need to Have:
At least 5 years of security incident response experience, such as working in a SOC or on a CIRT/DIRT team.
Experience leading security incidents as the incident commander.
Investigate security events, coordinating with other teams and organizations as needed.
Build high-confidence, low-noise security detections and alerts.
Experience with major cloud providers, such as AWS or GCP, and cloud technologies like Docker.
Comfortable with the Linux command line and able to use scripting languages to accelerate workflows, like Bash and Python.
Knowledge of web & cloud vulnerability categories and familiarity with CVSS.
Strong understanding of SaaS platform security, including access controls and phishing prevention.
Pragmatically balance business needs against security risk.
Clear written communication, including correspondence with internal stakeholders and third parties through documents, Slack messages, and emails.
Nice to Have:
Experience with infrastructure-as-code for writing detections, particularly Terraform.
Experience conducting vendor security reviews.
Ability to properly configure SAML SSO integrations.
Experience with systems administration or software development.
Experience working in high growth tech environments