Senior Security Operations Engineer

Delinea•Redwood City, CA

5d•Remote

About The Position

Delinea’s Cybersecurity organization is seeking a Senior Security Operations Engineer to lead the design, development, and continuous improvement of Delinea’s security detection and response capabilities. This role will be responsible for the engineering of scalable, automated security solutions across endpoint, network, cloud, and data domains. The ideal candidate brings deep hands-on engineering experience and the judgment to independently drive security initiatives from concept through production. This is a remote role that is based in the United States and reports to the Senior Security Operations Manager.

Requirements

Bachelor’s degree in a technical field (or equivalent)
7+ years of hands-on experience in a security engineering or security operations role
Demonstrated ability to independently scope, drive, and deliver multi-month security engineering projects, including but not limited to, security information and event management, endpoint detection and response, network detection and response, vulnerability management, threat intelligence, security awareness, data loss prevention, firewalls, and email security.
Experience with cloud-native environments (Azure and AWS)
Experience with cloud security platforms and infrastructure-as-code tools (Terraform, CloudFormation, Azure DevOps or similar).
Proficiency in scripting and automation languages (Python, PowerShell, or Bash) for developing security tools and automating repetitive tasks.
Proficient in spoken and written English.

Nice To Haves

Experience leading or contributing to purple team exercises or threat hunting programs
Security and/or technical industry certifications (ISC2, GIAC, EC-Council, ISACA, CompTIA, Cisco, Microsoft)
Experience with digital forensic, privileged access management, and penetration testing tools
Demonstrated working experience at the enterprise level with one or more of: SIEM, EDR, NDR, vulnerability management, threat intelligence, security awareness, DLP, firewalls, and email security.
Experience working within common regulatory and statutory requirements (GDPR, CCPA, SOC2, ISO 27001, NIST).

Responsibilities

Lead the development, rollout, and operations of security operations tools and services such as SIEM, EDR, NDR, email, cloud; building detection rules, automated playbooks, and integrations
Serve as a technical resource for security operations analysts; conduct design reviews and provide engineering guidance on detection and response workflows
Apply a detections-as-code approach; version-controlled, peer-reviewed, and tuned against alert quality metrics
Architect and implement security engineering capabilities, including endpoint security, data loss prevention, email security, network security, SIEM enhancements, detection engineering, and security automation.
Partner with cross-functional teams to perform threat modeling and embed security requirements in the development lifecycle.
Research, evaluate, and operationalize security products and services (including AI enabled platforms), building proof-of-concept integrations, provide recommendations or deferrals on adoption, and driving adoption across the security stack.