Senior Security Operations Engineer

Vailexa • San Francisco, CA

16h

About The Position

This role is for someone who thrives in ambiguity, can move quickly from signal to action, and enjoys building durable systems and playbooks — not just fighting fires. You’ll partner closely with Engineering, IT, Legal, and Business leaders to reduce risk, respond to incidents, and continuously raise the security bar across the company.

Requirements

• 5+ years of experience in Security Operations, Incident Response, Detection Engineering, or similar security roles.
• Strong understanding of attacker techniques and defensive strategies across cloud, endpoint, identity, and network surfaces.
• Hands-on experience with SIEMs, EDR platforms, and investigation workflows (including log querying and alert tuning).
• Ability to AI tools to streamline security operations and response.
• Experience building incident response processes, playbooks, and operational metrics that scale with company growth.
• Strong cross-functional collaboration skills, with the ability to influence Engineering and IT partners without relying on authority.
• Calm, structured decision-making under pressure, with strong written incident communication.
• AI fluency: ability to use AI tools to accelerate investigations (summarization, clustering, query generation) while validating outputs and protecting sensitive data.

Responsibilities

• Own end-to-end security incident response, including triage, containment, eradication, recovery, and post-incident learnings.
• Build and continuously improve detection coverage across cloud, endpoint, identity, and SaaS systems.
• Develop security automation and workflows to reduce manual toil and improve response speed.
• Lead investigations into suspicious activity, account compromise, and potential data exposure events.
• Partner with Engineering and IT to harden systems, improve logging/telemetry, and close recurring control gaps.
• Drive readiness through tabletop exercises, runbooks, metrics, and operational reviews.
• Manage security tooling configuration and tuning (SIEM, EDR, IAM, alerting) to reduce noise and increase fidelity.
• Communicate clearly during high-severity situations, aligning stakeholders on impact, status, and next steps.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed