Senior Corporate Security Operations Engineer

Attentive

8d•$140,000 - $207,000

About The Position

Attentive® is the AI marketing platform for 1:1 personalization redefining the way brands and people connect. We’re the only marketing platform that combines powerful technology with human expertise to build authentic customer relationships. By unifying SMS, RCS, email, and push notifications, our AI-powered personalization engine delivers bespoke experiences that drive performance, revenue, and loyalty through real-time behavioral insights. Recognized as the #1 provider in SMS Marketing by G2, Attentive partners with more than 8,000 customers across 70+ industries. Leading global brands like Crate and Barrel, Urban Outfitters, and Carter’s work with us to enable billions of interactions that power tens of billions in revenue for our customers. With a distributed global workforce and employee hubs in New York City, San Francisco, London, and Sydney, Attentive’s team has been consistently recognized for its performance and culture. We’re proud to be included in Deloitte’s Fast 500 (four years running!), LinkedIn’s Top Startups, Forbes’ Cloud 100 (five years running!), Inc.’s Best Workplaces, and the Human Rights Campaign Foundation's Corporate Equality Index! About the Role As a Senior Corporate Security Operations Engineer you will help protect our workforce, corporate systems, identities, endpoints, SaaS applications, and business operations. This is a hands-on role spanning both Security Operations and Corporate Security, with a primary focus on incident response and security investigations. You will investigate security incidents and suspicious activity, operate and improve security controls across our corporate environment, support third-party and customer security workflows, and partner closely with Security Engineering, IT, Legal, GRC, Procurement, and Engineering. This role combines operational security with engineering. You should be comfortable moving between investigating a suspected account compromise, reviewing endpoint or SaaS activity, assessing a third-party vendor, responding to a customer security questionnaire, and improving the tooling or automation that makes those activities more scalable.

Requirements

5+ years of experience in Security Operations, Incident Response, Corporate Security, Detection & Response, Security Engineering, or a related security discipline.
Strong hands-on experience investigating security incidents and suspicious activity.
Experience with identity, endpoint, SaaS, email, and security-monitoring telemetry.
Strong understanding of common attacker tactics, techniques, and procedures.
Experience with SIEM, EDR, identity, and enterprise SaaS security technologies.
Ability to independently scope investigations, gather evidence, assess risk, and determine next steps.
Experience with vendor security reviews, third-party risk, customer security questionnaires, or similar security-assurance work.
Experience using scripting, APIs, automation, or integrations to improve security operations.
Strong written and verbal communication skills and the ability to work effectively across technical and business teams.
Experience with Python, Go, Bash, or similar scripting languages.

Responsibilities

Lead and support security investigations and incident response involving account compromise, phishing and smishing, endpoint threats, suspicious SaaS activity, credential exposure, third-party applications, and other corporate security events.
Monitor and investigate alerts across identity, endpoint, SaaS, email, SIEM, and other security platforms.
Perform technical triage, determine severity and escalation paths, identify noisy detections or telemetry gaps, and partner with Security Engineering to improve detection and response quality.
Lead and manage complex Corporate Security projects to improve controls across identity, endpoint, browser, SaaS, and Zero Trust, while proactively assessing and mitigating risk to maintain an acceptable security posture.
Perform technical security assessments of software vendors and third party integrations, review security evidence and controls, work with vendors and internal stakeholders to resolve gaps, and support risk-based approval, exception, or escalation decisions
Support customer security questionnaires, RFPs, and trust requests by providing accurate security responses, gathering supporting evidence, and partnering with the appropriate subject-matter experts for complex product, cloud, data, privacy, AI, or architecture questions, ensuring established response SLAs are consistently met.
Improve Security Operations through automation, scripting, integrations, dashboards, workflow improvements, alert enrichment, and evidence collection.
Participate in on-call rotation, maintain and improve incident response runbooks and playbooks, contribute to tabletop exercises, and help strengthen overall incident readiness.
Communicate clearly with technical and non-technical stakeholders, document investigations and risk decisions, and collaborate across Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success.