
SecOps Engineer
Clipboard Health
- Location
- United States of America
- Posted
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
Clipboard Health
Senior Security Operations Engineer needed to define & improve security processes & systems, focusing on SIEM management & incident response in a 100% remote role.
TTEC Digital
As a Principal Database Engineer at TTEC Digital, you will lead database implementations, contribute to architecture design, and ensure exceptional customer experiences through innovative solutions. Work with cutting-edge technologies and collaborate with talented teams to deliver impactful results.
G-P
Design and deploy AI solutions using advanced machine learning techniques, including LLMs. Collaborate with teams to ensure business objectives are met while maintaining high-quality ML services.
Brilliant
Backend-leaning software engineer for Growth and Lifecycle domains at Brilliant, with 5+ years of experience in software engineering and AI-interoperable systems.
Kalepa
Join our team as a Core Engineer to work on cutting-edge technologies like NLP and machine learning. Collaborate with a global team of engineers in full-stack, data, ML, and DevOps roles. Enjoy competitive salary, equity options, excellent benefits, and other perks.
Superside
Lead Backend Engineer for cutting-edge tech in creative industry
Red Canary
Principal Detection Engineer at Red Canary: Improve threat reporting and response with expertise in endpoint detection and automation.
Gitlab
Provide professional services including installation, migration, training, and advisory support using IaC tools like Terraform and Ansible. Collaborate with customers and internal teams to ensure customer success and enhance GitLab's offerings.
Cyberhaven
Join Cyberhaven as a Professional Services Engineer and help clients integrate our data security solutions, troubleshoot technical challenges, and deliver high-quality services while staying updated on industry trends.
Goodnotes
Lead engineer at Goodnotes: build new products, partner with educators, and shape tech roadmaps.
Goodnotes
Lead engineering efforts at Goodnotes, building scalable solutions with modern tech stacks, and drive user growth and engagement.
Goodnotes
Lead engineer at Goodnotes, build new products from scratch with modern tech stacks, flexible remote work options, and meaningful equity.
Goodnotes
Lead engineer role at Goodnotes, building new products with modern tech stacks, flexible remote work, and opportunities for growth.
G-P
Design and develop cloud-enabled products using modern frameworks; collaborate with Product and UX teams; advocate agile methodologies; build prototypes and production features; contribute to SDLC evolution at G-P.
Makersite GmbH
Join Makersite as a QA Engineer to drive quality assurance in our B2B SaaS platform for sustainable product development. Utilize your expertise in automation testing, Python, Cypress, and TypeScript to ensure high-quality software solutions.
Vonage
Release Train Engineer (RTE) with SAFe Certified status, leading Agile transformations and optimizing team performance using Jira.
GuidePoint Security
Remote Identity Governance and Administration Engineer job with Saviynt experience required
Gitlab
Support public sector organizations and US Government agencies by resolving issues in their GitLab environments. Collaborate with cross-functional teams to build features and fix bugs while contributing to documentation and support processes. Enjoy a remote work environment with comprehensive benefits including flexible PTO and equity compensation.
Rackspace
Process Engineer I - Execute routine operational process methods and drive process improvement with a customer-centric approach.
Nextech
Quality Assurance Engineer at Nextech: Ensure product quality and functionality through testing and collaboration.
Clipboard Health
Clipboard Health is seeking a founding Senior Security Operations Engineer to shape the future of their security operations. As the first hire, you will define and improve security processes and systems, focusing on operational security work, SIEM management, and incident response. You will lead investigations, automate workflows, and partner with IT teams to refine procedures. The role requires at least 5 years of security incident response experience, leading security incidents as an Incident Commander, and experience with major cloud providers like AWS or GCP. You will have high autonomy and trust in a fast-growing tech environment, with opportunities for growth and impact.
We are looking for a founding Senior Security Operations Engineer to join Clipboard Health and shape the future of our security operations. As the first hire in this function, you will have the unique opportunity to define and improve security operations processes and systems. This role will focus on operational security work at Clipboard, including bolstering our situational awareness, automating cloud security detection and response capabilities, improving the security posture of 3rd party tools, and ensuring that security issues are handled as they arise. The culture is high-autonomy and high-trust, valuing speed and impact. We are looking for candidates with SIEM management and security D&R experience in web and cloud environments.
This is a 100% remote role, open exclusively to individuals who are legally authorized to work within the United States.
Security Operations, Investigation, and Incident Response
Lead investigations into security alerts and reported security events in a cloud-based environment.
Automate investigation workflows and integrate tools to accelerate response times and reduce manual intervention.
Serve as the Incident Commander, driving response efforts during security incidents, from containment through recovery and post-mortem analysis.
Define, document, and continuously improve security operations playbooks to ensure rapid and effective handling of security events.
Partner with IT and support teams on refining procedures relating to security.
SIEM Management
Develop and implement SIEM detections and alerting mechanisms using Terraform, Datadog, and other security tools.
Onboard, enrich, and normalize diverse log sources across cloud environments, applications, and endpoints.
Collaborate with engineering teams to instrument deployed resources with tooling, enhance security auditing capabilities, and improve visibility in our environment.
Vulnerability Management
Manage vulnerability tracking and reporting, ensuring vulnerabilities are tracked and assigned across teams.
Negotiate acceptable remediation approaches and prioritization with owning teams.
Drive remediation efforts, ensuring timely and thorough patching of identified security weaknesses.
Vendor Platform & Service Security
Evaluate and enhance the security posture of third-party services and integrations (e.g., Google Workspace, Slack, Zapier), ensuring optimal configuration and ongoing monitoring.
Monitor and respond to phishing emails and other security threats within Google Workspace.
Need to Have:
At least 5 years of security incident response experience, such as working in a SOC or on a CIRT/DIRT team.
Experience leading security incidents as the incident commander.
Investigate security events, coordinating with other teams and organizations as needed.
Build high-confidence, low-noise security detections and alerts.
Experience with major cloud providers, such as AWS or GCP, and cloud technologies like Docker.
Comfortable with the Linux command line and able to use scripting languages to accelerate workflows, like Bash and Python.
Knowledge of web & cloud vulnerability categories and familiarity with CVSS.
Strong understanding of SaaS platform security, including access controls and phishing prevention.
Pragmatically balance business needs against security risk.
Clear written communication, including correspondence with internal stakeholders and third parties through documents, Slack messages, and emails.
Nice to Have:
Experience with infrastructure-as-code for writing detections, particularly Terraform.
Experience conducting vendor security reviews.
Ability to properly configure SAML SSO integrations.
Experience with systems administration or software development.
Experience working in high growth tech environments