Security Operations Engineer

Collectors • Jersey City, NJ

1d • $140,971 - $228,870

About The Position

Collectors is seeking a Security Operations Engineer to join its Cybersecurity team and partner with the broader Product and Technology organization. The role will help establish secure-by-default architectures and protect the security and integrity of the company’s infrastructure. The Cybersecurity team applies cybersecurity, risk, and privacy best practices across its platforms, using signal intelligence and observability to protect customers, employees, and the company’s brand.

The position is based at the Santa Ana, California office, with remote or hybrid candidates also considered. Employees living within a one-hour commute of an office are expected to work onsite most of the time. The engineer will participate in a shared on-call rotation and help make it sustainable by improving runbooks, escalation paths, and alert quality.

Requirements

• At least 5 years of experience in security operations, incident response, or detection engineering, including at least 2 years operating at a senior level in a cloud-native environment.
• Deep hands-on experience securing AWS at scale in a multi-account organization, including IAM, CloudTrail, GuardDuty, Security Hub, EC2, EKS, and Lambda.
• Strong SIEM proficiency, including building and tuning detections, writing complex queries, and managing log pipelines.
• Proficiency in one or more general-purpose programming or scripting languages, preferably Python, and ability to build automation, integrations, and SOAR playbooks from scratch.
• Incident response experience, calm decision-making under pressure, clear communication with technical and executive audiences, and ability to lead without formal authority.
• Understanding of attacker tradecraft, MITRE ATT&CK, and cloud-specific attack paths, with the ability to use this knowledge to prioritize work.
• Experience influencing engineering roadmaps, negotiating with vendors, and representing security operations in cross-functional forums.
• Pragmatic, outcome-driven approach that balances security goals with operational realities.
• Excellent problem-solving skills, ability to work independently, and ability to handle multiple tasks.
• Familiarity with major compliance frameworks such as PCI, NIST, ISO, and SOX, and experience assisting with audits.

Nice To Haves

• Familiarity with GCP or Azure.

Responsibilities

• Build, tune, and manage high-confidence detections across AWS and GCP, enterprise tools such as Okta, Google Workspace, and Microsoft 365, and vendor products.
• Manage detections as code using version control, peer review, CI testing, and measurement of precision and MITRE ATT&CK coverage.
• Serve as a senior incident responder, driving triage, containment, forensics, and remediation, and author post-incident reviews that lead to durable improvements.
• Conduct proactive threat hunts across cloud, SaaS, identity, and on-premises infrastructure, converting findings into detections and hardened controls.
• Design and build automation and SOAR playbooks to reduce manual work, accelerate response, and improve alert enrichment and case management.
• Own and improve the security data pipeline, including log-source onboarding, parser and schema quality, coverage-gap analysis, and data quality across cloud, SaaS, and on-premises sources.
• Integrate automation for identifying, prioritizing, and remediating vulnerabilities.
• Partner with infrastructure, platform, and engineering teams to embed security operations requirements into new services and cloud architecture decisions.
• Champion company policies, including safety, attendance, and security.
• Participate in a shared on-call rotation and continuously improve runbooks, escalation paths, and alert quality.

Benefits

• Medical, dental, and vision insurance for full-time employees.
• Fertility, commuter, and educational assistance benefits for full-time employees.
• 401(k) matching plan.
• Flexible time off for salaried employees.
• Ten company-paid holidays for regular, full-time employees.
• Discounts on select grading services for approved submissions.
• Flexible schedules, with varying shifts offered by many teams.
• Company celebrations, holiday events, and team-building activities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed