Responsible for operating, securing, and continuously improving Operative’s enterprise security capabilities
Own day-to-day security engineering operations including detection and response, vulnerability remediation, identity protection, incident response, hardening, and security platform management
Operate and maintain enterprise EDR, SIEM, and security monitoring platforms across production environments
Partner with Infrastructure, CloudOps, and Engineering teams to resolve security-impacting operational issues
Lead OS lifecycle modernization, end-of-support migrations, and hardened golden image standards
Drive remediation of internet-facing vulnerabilities with urgency aligned to active threat intelligence
Support enterprise incident response, ransomware preparedness, identity recovery, and containment operations
Requirements
8–12+ years of hands-on experience in security engineering
Strong hands-on experience in security engineering, detection engineering, infrastructure security, and cloud security
Experience working directly with Engineering, Infrastructure, and Executive leadership teams
Strong operational experience with Linux systems including troubleshooting, hardening, and production support
Strong understanding of modern attacker techniques, identity compromise, ransomware operations, and enterprise defense strategies
Proven ability to partner cross-functionally and influence without authority