
SecOps Engineer
Clipboard Health
- Location
- United States of America
- Posted
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Clipboard Health
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Broadvoice
QA Automation Engineer at Broadvoice: design, develop, maintain automated test scripts & frameworks, collaborate with developers, execute automated tests
Broadvoice
QA Automation Engineer at Broadvoice: Design & develop automated test scripts & frameworks for high-quality software delivery
CoinsPaid
Join CoinsPaid as Security Infrastructure Engineer and enhance secure development practices with logging systems, Hashicorp Vault, and DevSecOps tools.
Douro Labs
Build DeFi infrastructure by developing smart contracts, SDKs, and tools. Collaborate globally, shape product direction, and thrive in a dynamic startup environment with remote flexibility.
Figma
Design and build scalable infrastructure for Figma's tools, secure networks, develop service meshes, and mitigate DDoS threats while working on cutting-edge technologies to support our growing customer base.
The Athletic Media Company
Join The Athletic as a Full-Stack Engineer to build innovative solutions for sports media, focusing on growth features and scalable backend systems. Work remotely with a global team and enjoy competitive benefits.
360Learning
Full-stack developer for LMS platform with flexible remote work options and comprehensive benefits package
Planet
Join Planet as a Software Engineer and contribute to innovative systems that extract insights from satellite imagery for applications in agriculture, forestry, climate, land management, and more.
Enode
Join Enode as a Mid-Level Engineer and accelerate the transition to a sustainable energy system
Adaptavist
Join The Adaptavist Group as a Software Engineer to build and maintain cloud products using AWS, collaborate with teams, and deliver reliable solutions in the Atlassian ecosystem.
Gauntlet
Join Gauntlet as a Software Engineer to develop Aera's treasury management platform. Collaborate on cutting-edge DeFi solutions, leverage Python expertise, and enjoy comprehensive benefits including remote flexibility and wellness support.
Figma
Figma developer tools role: build Dev Mode, collaborate on new products, mentor peers & drive solutions with React, Typescript & Ruby/Sinatra.
Athennian
Senior Engineer at Athennian: Design scalable software solutions, mentor junior engineers, and drive technical excellence in a fast-paced startup environment.
Udacity
Backend Software Engineer at Udacity: build scalable microservices with production quality, participate in design reviews, and manage cloud resources.
Level AI
Coordinate SaaS instance setups, manage technical configurations, and ensure successful customer onboarding at Level AI. Work with cross-functional teams to mitigate risks and deliver high-quality implementations.
Cargo.one
Cloud Infrastructure Engineer at cargo.one: Collaborate with diverse stakeholders to contribute to cloud infrastructure and ensure quality work. Flexible remote work options and unlimited co-working options available.
WorkOS
Join WorkOS's AuthKit team as a Senior Software Engineer to build identity and authentication solutions for developers. Design and engineer developer experiences, collaborate with teams, gather customer feedback, and contribute to innovative projects in a fast-paced environment.
WorkOS
Join WorkOS as a Security Engineer to enhance our security infrastructure, ensuring the safety of authentication and identity solutions for thousands of SaaS customers. Lead security projects, mentor teams, and implement best practices using tools like SCA, SAST, DAST, and CNAPP.
Wealthfront
Join Wealthfront's Security Engineering team as a security-minded engineer to build and mature security solutions in a fast-growing fintech organization.
Clipboard Health
Clipboard Health is seeking a founding Senior Security Operations Engineer to shape the future of their security operations. As the first hire, you will define and improve security processes and systems, focusing on operational security work, SIEM management, and incident response. You will lead investigations, automate workflows, and partner with IT teams to refine procedures. The role requires at least 5 years of security incident response experience, leading security incidents as an Incident Commander, and experience with major cloud providers like AWS or GCP. You will have high autonomy and trust in a fast-growing tech environment, with opportunities for growth and impact.
We are looking for a founding Senior Security Operations Engineer to join Clipboard Health and shape the future of our security operations. As the first hire in this function, you will have the unique opportunity to define and improve security operations processes and systems. This role will focus on operational security work at Clipboard, including bolstering our situational awareness, automating cloud security detection and response capabilities, improving the security posture of 3rd party tools, and ensuring that security issues are handled as they arise. The culture is high-autonomy and high-trust, valuing speed and impact. We are looking for candidates with SIEM management and security D&R experience in web and cloud environments.
This is a 100% remote role, open exclusively to individuals who are legally authorized to work within the United States.
Security Operations, Investigation, and Incident Response
Lead investigations into security alerts and reported security events in a cloud-based environment.
Automate investigation workflows and integrate tools to accelerate response times and reduce manual intervention.
Serve as the Incident Commander, driving response efforts during security incidents, from containment through recovery and post-mortem analysis.
Define, document, and continuously improve security operations playbooks to ensure rapid and effective handling of security events.
Partner with IT and support teams on refining procedures relating to security.
SIEM Management
Develop and implement SIEM detections and alerting mechanisms using Terraform, Datadog, and other security tools.
Onboard, enrich, and normalize diverse log sources across cloud environments, applications, and endpoints.
Collaborate with engineering teams to instrument deployed resources with tooling, enhance security auditing capabilities, and improve visibility in our environment.
Vulnerability Management
Manage vulnerability tracking and reporting, ensuring vulnerabilities are tracked and assigned across teams.
Negotiate acceptable remediation approaches and prioritization with owning teams.
Drive remediation efforts, ensuring timely and thorough patching of identified security weaknesses.
Vendor Platform & Service Security
Evaluate and enhance the security posture of third-party services and integrations (e.g., Google Workspace, Slack, Zapier), ensuring optimal configuration and ongoing monitoring.
Monitor and respond to phishing emails and other security threats within Google Workspace.
Need to Have:
At least 5 years of security incident response experience, such as working in a SOC or on a CIRT/DIRT team.
Experience leading security incidents as the incident commander.
Investigate security events, coordinating with other teams and organizations as needed.
Build high-confidence, low-noise security detections and alerts.
Experience with major cloud providers, such as AWS or GCP, and cloud technologies like Docker.
Comfortable with the Linux command line and able to use scripting languages to accelerate workflows, like Bash and Python.
Knowledge of web & cloud vulnerability categories and familiarity with CVSS.
Strong understanding of SaaS platform security, including access controls and phishing prevention.
Pragmatically balance business needs against security risk.
Clear written communication, including correspondence with internal stakeholders and third parties through documents, Slack messages, and emails.
Nice to Have:
Experience with infrastructure-as-code for writing detections, particularly Terraform.
Experience conducting vendor security reviews.
Ability to properly configure SAML SSO integrations.
Experience with systems administration or software development.
Experience working in high growth tech environments