Senior Security Engineer
Lead threat detection and incident response for enterprise clients, hardening cloud and hybrid environments against real-world attacks.
About this role
Our security operations practice sits at the center of how we protect enterprise clients - not a back-office function, but the team leadership calls first when something looks wrong. As Senior Security Engineer, you will own detection coverage and incident response across a portfolio of client environments spanning cloud, on-premises, and hybrid infrastructure.
Day to day, that means building and tuning detections before they are needed, leading the room during a live incident, and turning every post-incident review into a concrete improvement to how we defend the next environment. You will work closely with client stakeholders directly, not through several layers of account management, so your technical judgment carries real weight in the room.
We are a small enough team that your fingerprints end up on the whole practice: the tooling we standardize on, the playbooks junior analysts learn from, and the bar we hold ourselves to. If you want ownership over outcomes rather than a narrow slice of a much larger SOC, this is built for you.
What you’ll do
- Own detection engineering across SIEM, EDR, and cloud-native tooling
- Lead incident response and post-incident reviews for enterprise clients
- Threat-model client architectures and drive remediation roadmaps
- Mentor analysts and raise the bar on the security operations team
What we’re looking for
- 6+ years in security engineering or SOC / incident response
- Deep hands-on experience with AWS or Azure security services
- Strong scripting skills (Python, Go, or similar) for automation
- One or more of OSCP, GCIH, CISSP, or equivalent experience
Nice to have
- Detection-as-code experience
- Familiarity with Kubernetes security