Own the operational backbone of Detection & Response (D&R): intake, triage, investigation flow, reporting, and MDR oversight.
Redesign processes, write code to eliminate toil, and leverage AI to make the team faster.
Engage partners effectively, ensuring D&R delivers on its mission.
Ensures detections flow into operational processes, manages investigations and incidents.

10+ years security operations or SOC experience
Writes code—Python, scripting, API work; builds own tools
Experience redesigning and simplifying operational processes
Experience managing MSSP/MDR vendor integrations
Strong Jira/ticketing system expertise
Clear written communication—documents processes others can follow.
Experience applying AI/LLMs to security operations (triage, enrichment, summarization)
SOAR platform experience
Experience building security operations workflows from scratch
Background in process design or operational improvement

Staff Security Operations Engineer

Key skills