
SecOps Engineer
Clipboard Health
- Location
- United States of America
- Posted
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Clipboard Health
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Binance
Java Lead Engineer for financial & marketing products at Binance
StackAdapt
Lead StackAdapt's backend engineering team by integrating data into CDPs, designing scalable systems, and promoting best practices in software development. Enjoy a supportive culture with robust benefits and opportunities for growth.
Canonical
Support the Ubuntu community by facilitating technical projects, creating engaging content, and representing Canonical at events. Utilize your expertise in Linux and related technologies to foster collaboration and innovation within the open-source ecosystem.
Finom
MLRO & Head of Branch - Italy at Finom: Oversee Italian branch operations, manage compliance tasks, and collaborate with stakeholders in a start-up environment that values innovation and employee well-being.
Binance
Senior DevOps Engineer for Java/Rust applications with expertise in AWS cloud services, open-source software, and Linux administration.
Red Canary
Join Red Canary as a Sales Engineer and help guide customers through their security journey with our innovative solutions. Use your technical expertise in networking, endpoint security, cloud infrastructure, and scripting to deliver impactful presentations and facilitate proof-of-concepts while collaborating with Account Executives.
Binance
Senior Java Engineer at Binance Wallet in Taipei, Taiwan, with expertise in blockchain development and big data real-time computing.
Sporty Group
Join Sporty Group as an Android Engineer and develop impactful features for their mobile app. Collaborate with cross-functional teams, mentor less experienced team members, and contribute to the company's mission to create value for users.
reserv
Litigation Claims Examiner at Reserv - Manage litigated files, negotiate settlements, and collaborate with product teams.
reserv
BI-LIT Claims Examiner at Reserv: Manage litigated files, negotiate settlements, and collaborate with teams to drive innovation.
Binance
Senior QA Engineer for high-quality software products at Binance, with expertise in automation & Java coding.
Canonical
Business Systems Engineer with Salesforce experience required for Canonical's EMEA region team
DevRev
Apply for Applied AI Engineer at DevRev, develop solutions using TypeScript, JavaScript, Python, and Generative AI technologies, and shape the future of customer-centric companies.
Canonical
Join Canonical's Linux kernel team as a software engineer, working on stable and cutting-edge kernels for Ubuntu and its ecosystem.
Xero
Join Xero as a Senior Software Engineer to develop innovative solutions using C#, React, and AWS. Lead teams, mentor engineers, and contribute to high-quality software products while enjoying excellent benefits like private medical insurance and flexible work arrangements.
Rackspace
Join Rackspace as an Observability Engineer to implement modern observability solutions using tools like Datadog, New Relic, or Splunk. Work on scalable systems, analyze performance data, and collaborate with teams to ensure system reliability. Enjoy benefits including unlimited PTO and flexible work options.
Moonpay
IT Engineer at MoonPay: Develop automations & systems integrations across Core Business platforms, build custom apps & authentication services.
Canonical
Business Systems Engineer with NetSuite experience for Canonical in EMEA region
ev.energy
Join ev.energy as a developer and help drive change in the electric vehicle charging industry with our smart-charging algorithm and demand side response services.
Clipboard Health
Clipboard Health is seeking a founding Senior Security Operations Engineer to shape the future of their security operations. As the first hire, you will define and improve security processes and systems, focusing on operational security work, SIEM management, and incident response. You will lead investigations, automate workflows, and partner with IT teams to refine procedures. The role requires at least 5 years of security incident response experience, leading security incidents as an Incident Commander, and experience with major cloud providers like AWS or GCP. You will have high autonomy and trust in a fast-growing tech environment, with opportunities for growth and impact.
We are looking for a founding Senior Security Operations Engineer to join Clipboard Health and shape the future of our security operations. As the first hire in this function, you will have the unique opportunity to define and improve security operations processes and systems. This role will focus on operational security work at Clipboard, including bolstering our situational awareness, automating cloud security detection and response capabilities, improving the security posture of 3rd party tools, and ensuring that security issues are handled as they arise. The culture is high-autonomy and high-trust, valuing speed and impact. We are looking for candidates with SIEM management and security D&R experience in web and cloud environments.
This is a 100% remote role, open exclusively to individuals who are legally authorized to work within the United States.
Security Operations, Investigation, and Incident Response
Lead investigations into security alerts and reported security events in a cloud-based environment.
Automate investigation workflows and integrate tools to accelerate response times and reduce manual intervention.
Serve as the Incident Commander, driving response efforts during security incidents, from containment through recovery and post-mortem analysis.
Define, document, and continuously improve security operations playbooks to ensure rapid and effective handling of security events.
Partner with IT and support teams on refining procedures relating to security.
SIEM Management
Develop and implement SIEM detections and alerting mechanisms using Terraform, Datadog, and other security tools.
Onboard, enrich, and normalize diverse log sources across cloud environments, applications, and endpoints.
Collaborate with engineering teams to instrument deployed resources with tooling, enhance security auditing capabilities, and improve visibility in our environment.
Vulnerability Management
Manage vulnerability tracking and reporting, ensuring vulnerabilities are tracked and assigned across teams.
Negotiate acceptable remediation approaches and prioritization with owning teams.
Drive remediation efforts, ensuring timely and thorough patching of identified security weaknesses.
Vendor Platform & Service Security
Evaluate and enhance the security posture of third-party services and integrations (e.g., Google Workspace, Slack, Zapier), ensuring optimal configuration and ongoing monitoring.
Monitor and respond to phishing emails and other security threats within Google Workspace.
Need to Have:
At least 5 years of security incident response experience, such as working in a SOC or on a CIRT/DIRT team.
Experience leading security incidents as the incident commander.
Investigate security events, coordinating with other teams and organizations as needed.
Build high-confidence, low-noise security detections and alerts.
Experience with major cloud providers, such as AWS or GCP, and cloud technologies like Docker.
Comfortable with the Linux command line and able to use scripting languages to accelerate workflows, like Bash and Python.
Knowledge of web & cloud vulnerability categories and familiarity with CVSS.
Strong understanding of SaaS platform security, including access controls and phishing prevention.
Pragmatically balance business needs against security risk.
Clear written communication, including correspondence with internal stakeholders and third parties through documents, Slack messages, and emails.
Nice to Have:
Experience with infrastructure-as-code for writing detections, particularly Terraform.
Experience conducting vendor security reviews.
Ability to properly configure SAML SSO integrations.
Experience with systems administration or software development.
Experience working in high growth tech environments