Security Engineer III

Veeam Software • San Jose, CA

6h • $205,920 - $343,200

About The Position

Veeam is hiring a Security Engineer III for its Platform Security team. The role owns threat detection and response across the company’s cloud estate and builds the security data lake that supports those capabilities. Veeam’s cloud-native SaaS platform runs on Microsoft Azure and AWS and provides data protection services to customers, including those in regulated industries.

The engineer will own detection engineering and cloud security end to end, including security telemetry pipelines, detections, and preventive controls in Azure and AWS. The role works closely with SRE, Product Engineering, and Security Engineering, emphasizing the delivery of production mechanisms and code. The technology environment includes Microsoft Sentinel, KQL, Azure and AWS security services, Terraform, GitHub Actions, Azure DevOps, Wiz, cloud data lake and pipeline components, Python, Sigma, and Git-based review.

The position calls for at least five years of relevant security engineering, cloud operations, or detection engineering experience, recent hands-on ownership of production cloud security, production Terraform experience, and operational depth in both Azure and AWS. Compensation is listed as total target compensation of $205,920–$343,200 USD. Veeam offers a broad benefits package, including unlimited paid time off, paid holidays, medical, dental and vision coverage, retirement matching, parental leave, and learning opportunities.

Requirements

• At least 5 years of experience in security engineering, cloud operations, or detection engineering, with recent hands-on ownership of production cloud security work.
• Production Terraform experience, including writing and maintaining modules used by other teams.
• Operational depth in both Azure and AWS, including identity models, logging and audit sources, network boundaries, and provider security defaults.
• Demonstrated experience building detections against real telemetry, tuning false positives, and explaining a shipped and validated rule.
• Strong cloud security fundamentals, including RBAC and least privilege, secret and key management, egress control, and public-exposure prevention.
• Fluency in at least one security-data query language, such as KQL, SQL, or an equivalent, and ability to distinguish query problems from data-model problems.
• Scripting and automation ability in Python or a comparable language to build and maintain tooling.
• A track record of shipping production code or infrastructure; this is a hands-on building role, not an advisory role.

Nice To Haves

• Production-scale Microsoft Sentinel experience, including analytics rules, automation rules, ingestion cost management, and multi-workspace design.
• Wiz experience, including turning posture and attack-path findings into an owned remediation workflow.
• Cloud incident response experience, on-call or as an investigator.
• Security data lake or SIEM migration experience, including cost and retention tradeoffs.
• Kubernetes and container security exposure, such as AKS or EKS, and runtime detection for containerized workloads.
• Familiarity with regulated-industry audit expectations such as SOC 2 Type 2, ISO 27001, FedRAMP, or HITRUST, and logging and monitoring controls.
• Relevant certifications, such as Azure or AWS security specialty, GCIA, GCDA, or similar.

Responsibilities

• Design and build the security data lake, selecting telemetry sources, normalization and retention approaches, and cost controls.
• Write, tune, test, deploy, measure, version-control, and retire detections as code through CI/CD.
• Automate alert triage and enrichment, integrate runbooks into tooling, and improve detection and response times.
• Harden Azure and AWS environments, including identity and RBAC boundaries, network egress, key and secret handling, logging coverage, and public-exposure controls across tenants and accounts.
• Deliver cloud security controls through Terraform modules and pipelines so fixes are consistently applied across environments.
• Turn cloud security posture findings into a prioritized and owned remediation queue in partnership with the teams responsible for the resources.
• Assess detection coverage against a recognized threat framework, identify relevant gaps, and close them.
• Set direction for detection and cloud security tooling, including deciding what to adopt, retire, or build.
• Partner with SRE, Product Engineering, and Security Engineering.

Benefits

• Unlimited paid time off.
• 12 paid holidays, including 4 global VeeaMe Days for self-care.
• 24 paid volunteer hours annually through Veeam Cares.
• Paid parental leave: 8 weeks for all parents and 16 weeks for birthing parents.
• Medical, dental, and vision coverage starting on the first day.
• Mental health support, therapy sessions, and digital wellness tools through the Employee Assistance Program.
• 401(k) retirement plan with company matching contributions.
• Fertility, adoption, and surrogacy support through Maven.
• AirVet 24/7 virtual veterinary care at no cost.
• Legal services, identity protection, and supplemental health insurance options.
• Tax-advantaged spending accounts for healthcare, dependent care, and commuting.
• Learning and development opportunities, including LinkedIn Learning, O’Reilly, mentoring, workshops, and learning events.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed