Security -Sr Security Operations Engineer

WoodmenLIfe•Omaha, NE

2d•Hybrid

About The Position

WoodmenLife is seeking a Security Operations Engineer or Sr. Security Operations Engineer to help build and advance our modern cybersecurity operations program. This is an exciting opportunity for a security professional who enjoys solving complex challenges, investigating threats, developing automation, and leveraging emerging technologies such as AI to improve security outcomes. In this role, you will play a critical part in protecting WoodmenLife's systems, applications, identities, and data. You'll work with modern security technologies, advanced detection platforms, security automation tools, AI-powered workflows, and Identity & Access Management solutions while helping strengthen the organization's overall security posture. Whether hired at the Engineer or Senior Engineer level, you will have the opportunity to make a measurable impact through threat hunting, incident response, detection engineering, security automation, and identity governance initiatives. At WoodmenLife, you'll join a collaborative team environment where continuous learning, innovation, and professional growth are encouraged. This role offers multiple career paths within cybersecurity engineering, security operations, identity security, and automation engineering. The Security Operations team is part of the Risk Division and is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the enterprise. Current strategic initiatives include: Security automation and orchestration, AI-assisted security operations, Threat detection and response modernization, Identity & Access Management modernization through ConductorOne, Access governance and lifecycle automation, Vulnerability management improvement, Security monitoring and response optimization. The Security Operations Engineer / Sr. Security Operations Engineer is responsible for proactively identifying and responding to cybersecurity threats, validating security controls, improving detection capabilities, and supporting the secure operation of enterprise systems. This role combines threat hunting, security monitoring, incident response, security engineering, automation development, and identity security. The successful candidate will help design and implement automated workflows, develop security playbooks and runbooks, optimize detection capabilities, and partner with stakeholders across the organization to strengthen WoodmenLife's cybersecurity posture. Candidates hired at the Senior Engineer level will also serve as technical leaders, leading complex investigations, mentoring team members, and driving strategic security initiatives.

Requirements

Associate degree in Information Security, Computer Science, Engineering, or related field (or equivalent experience).
3+ years of Security Operations, SOC, Incident Response, or Security Engineering experience.
Experience with security monitoring, threat detection, and incident response.
Familiarity with SIEM, IDS/IPS, EDR/XDR, firewall, and cloud security technologies.
Experience with vulnerability management processes.
Knowledge of security frameworks such as NIST, ISO 27001, or CIS Controls.
Familiarity with Python, PowerShell, Bash, or similar scripting languages.
Understanding of cloud security principles.
Experience with AI-powered security tools, copilots, automation platforms, or agentic workflows.
Strong analytical, troubleshooting, and communication skills.
Bachelor's degree in Information Security, Computer Science, Engineering, or related field (or equivalent experience).
5+ years of Security Operations, Incident Response, Threat Detection, or Security Engineering experience.
Demonstrated experience leading complex incident investigations.
Experience conducting advanced threat hunting activities.
Experience managing vulnerability remediation programs.
Advanced experience with SIEM platforms, detection engineering, and security analytics.
Strong cloud security knowledge across Azure, AWS, or GCP environments.
Proficiency with security automation and scripting technologies.
Experience mentoring engineers or providing technical leadership.
Strong understanding of NIST, CIS, ISO 27001, or related frameworks.

Nice To Haves

Professional cybersecurity certifications such as: CISSP, GCIH, GCIA, GCFA, CEH, Security+, OSCP
Experience working in a Security Operations Center (SOC).
Experience with MITRE ATT&CK.
Experience with security automation and orchestration platforms.
Experience with AI-assisted security operations.
Experience supporting regulated or financial-services environments.
Experience with Identity Governance and Administration platforms.

Responsibilities

Investigate and respond to cybersecurity incidents across enterprise systems and environments.
Perform triage, containment, eradication, recovery, and post-incident analysis activities.
Conduct root cause analysis and document incident findings.
Escalate and coordinate response efforts during critical security events.
Continuously improve incident response procedures and operational readiness.
Proactively hunt for emerging threats and suspicious activity.
Develop, tune, and optimize detection rules and alerting capabilities.
Analyze network, cloud, endpoint, application, and identity-related security events.
Leverage threat intelligence and security frameworks to enhance detection effectiveness.
Identify attack patterns and security gaps before they become incidents.
Develop and maintain security automation workflows and orchestration processes.
Build scripts and integrations using Python, PowerShell, or similar technologies.
Design and maintain runbooks, playbooks, and response workflows.
Leverage AI-powered tools, copilots, and agentic workflows to improve operational efficiency.
Identify opportunities to reduce manual effort through automation and intelligent process design.
Support Identity Governance and Administration initiatives.
Manage identity lifecycle processes including provisioning, deprovisioning, and access changes.
Support access reviews, certifications, and governance activities.
Implement and maintain least-privilege access controls.
Partner with stakeholders to strengthen enterprise identity security practices.
Administer and optimize security monitoring and response platforms.
Configure and maintain security detections, alerts, dashboards, and workflows.
Evaluate new technologies and security capabilities.
Support cloud security initiatives and security architecture reviews.
Troubleshoot complex issues involving security tools and integrations.
Conduct vulnerability assessments and support remediation efforts.
Validate security controls and response capabilities.
Collaborate with Technology teams to prioritize and address risk.
Identify gaps in security coverage and recommend improvements.
Partner with Business Technology, Infrastructure, Compliance, and Engineering teams.
Contribute to security standards, procedures, and best practices.
Participate in security awareness and training initiatives.
Stay current on emerging threats, technologies, and industry trends.
(Senior Level) Mentor and coach Security Operations team members.