
SecOps Engineer
Clipboard Health
- Location
- United States of America
- Posted
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Clipboard Health
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Bugcrowd
Application Security Engineer at Bugcrowd: Curate and manage security vulnerability submissions for top companies
Binance
Application Security Engineer at Binance: Collaborate on mobile security, blockchain security, and AI tools
Vercel
Enhance Vercel's billing systems by designing features, developing APIs, collaborating with teams, optimizing performance, and troubleshooting issues. Utilize JavaScript, React, Node.js, and cloud technologies in a remote-friendly environment.
PTP
Assist in migrating products to GCP, deploy and manage applications using command-line tools, validate software deployments, write queries for configuration changes, pre-stage software with Jenkins and git, troubleshoot system behavior with Unix commands. Requires experience with GCP networking, containerized apps, Kubernetes, Docker, Terraform, databases, programming languages, microservices, and Google Cloud certifications.
Quantum Metric
Support clients' success by managing their implementation and growth using Quantum Metric's platform. Utilize web technologies and analytics to create innovative solutions for client challenges.
Quantum Metric
Support client success with Quantum Metric's platform by managing implementations, onboarding, and providing technical guidance. Utilize JavaScript and web technologies to ensure clients achieve their objectives.
Hightouch
Customer Success Engineering role at Hightouch, empowering users to take action on their data without coding, with a focus on impact and potential for growth.
Hightouch
Provide technical support to customers using the Hightouch platform, collaborate with cross-functional teams, and ensure customer success through effective communication and problem-solving.
Vercel
Resolve customer issues, improve internal tools, and provide engineering solutions to enhance the customer experience at Vercel. Work remotely with a global team using your expertise in frontend development and cloud technologies.
Twilio
Provide technical support to Segment customers, help them utilize the API across web, mobile, and server platforms, improve documentation, and work with product teams to enhance customer satisfaction.
TrustArc
Software tester position at TrustArc with Java development skills and experience with automated tools.
Trafilea
Web Security Engineer at Trafilea: Ensure web application security and integrity through vulnerability identification and implementation of best practices.
Irreducible
Optimize and develop high-performance cryptographic software solutions using Rust, collaborate on innovative projects, and lead a team of engineers in advancing zero-knowledge proofs.
Anywhere365
Join Anywhere365 as a 2nd Line Technical Support Engineer to troubleshoot software issues, manage incidents, and collaborate with teams to ensure customer satisfaction. Utilize skills in VoIP, Azure, and log analysis to deliver high-quality support.
RevenueCat
Senior SDK Engineer at RevenueCat: design & build mobile subscription infrastructure
Postman
Customer Education Engineer at Postman: design frontend changes, integrate LMS, and develop self-contained training solutions.
Invisible Technologies
Join Invisible Technologies as a Forward Deployed Engineer and contribute to the development of their AI training and scaling platform.
ElevenLabs
Forward Deployed Software Engineer (FDSE) role at ElevenLabs, driving innovation in voice technology with top customers.
Invisible Technologies
Join Invisible as a Forward Deployed Engineer and contribute to AI-enabled solutions that transform business operations.
Clipboard Health
Clipboard Health is seeking a founding Senior Security Operations Engineer to shape the future of their security operations. As the first hire, you will define and improve security processes and systems, focusing on operational security work, SIEM management, and incident response. You will lead investigations, automate workflows, and partner with IT teams to refine procedures. The role requires at least 5 years of security incident response experience, leading security incidents as an Incident Commander, and experience with major cloud providers like AWS or GCP. You will have high autonomy and trust in a fast-growing tech environment, with opportunities for growth and impact.
We are looking for a founding Senior Security Operations Engineer to join Clipboard Health and shape the future of our security operations. As the first hire in this function, you will have the unique opportunity to define and improve security operations processes and systems. This role will focus on operational security work at Clipboard, including bolstering our situational awareness, automating cloud security detection and response capabilities, improving the security posture of 3rd party tools, and ensuring that security issues are handled as they arise. The culture is high-autonomy and high-trust, valuing speed and impact. We are looking for candidates with SIEM management and security D&R experience in web and cloud environments.
This is a 100% remote role, open exclusively to individuals who are legally authorized to work within the United States.
Security Operations, Investigation, and Incident Response
Lead investigations into security alerts and reported security events in a cloud-based environment.
Automate investigation workflows and integrate tools to accelerate response times and reduce manual intervention.
Serve as the Incident Commander, driving response efforts during security incidents, from containment through recovery and post-mortem analysis.
Define, document, and continuously improve security operations playbooks to ensure rapid and effective handling of security events.
Partner with IT and support teams on refining procedures relating to security.
SIEM Management
Develop and implement SIEM detections and alerting mechanisms using Terraform, Datadog, and other security tools.
Onboard, enrich, and normalize diverse log sources across cloud environments, applications, and endpoints.
Collaborate with engineering teams to instrument deployed resources with tooling, enhance security auditing capabilities, and improve visibility in our environment.
Vulnerability Management
Manage vulnerability tracking and reporting, ensuring vulnerabilities are tracked and assigned across teams.
Negotiate acceptable remediation approaches and prioritization with owning teams.
Drive remediation efforts, ensuring timely and thorough patching of identified security weaknesses.
Vendor Platform & Service Security
Evaluate and enhance the security posture of third-party services and integrations (e.g., Google Workspace, Slack, Zapier), ensuring optimal configuration and ongoing monitoring.
Monitor and respond to phishing emails and other security threats within Google Workspace.
Need to Have:
At least 5 years of security incident response experience, such as working in a SOC or on a CIRT/DIRT team.
Experience leading security incidents as the incident commander.
Investigate security events, coordinating with other teams and organizations as needed.
Build high-confidence, low-noise security detections and alerts.
Experience with major cloud providers, such as AWS or GCP, and cloud technologies like Docker.
Comfortable with the Linux command line and able to use scripting languages to accelerate workflows, like Bash and Python.
Knowledge of web & cloud vulnerability categories and familiarity with CVSS.
Strong understanding of SaaS platform security, including access controls and phishing prevention.
Pragmatically balance business needs against security risk.
Clear written communication, including correspondence with internal stakeholders and third parties through documents, Slack messages, and emails.
Nice to Have:
Experience with infrastructure-as-code for writing detections, particularly Terraform.
Experience conducting vendor security reviews.
Ability to properly configure SAML SSO integrations.
Experience with systems administration or software development.
Experience working in high growth tech environments