Security Operations Engineer

SafelyYou is hiring a Security Operations Engineer to own technical execution, systems hardening, and lifecycle management within its Enterprise Information Technology security operations function. The role focuses on building resilient infrastructure and security processes, including SIEM capabilities, secure provisioning, incident operations, and cross-functional handoffs.

Responsibilities:

• Security Project Management: Act as the primary internal technical lead for upcoming third-party security assessments and external vulnerability testing, driving vendor coordination, timeline management, and remediation tracking
• SIEM & Log Analysis Architecture: Lead the design, implementation, and ongoing management of our Security Information and Event Management (SIEM) capability. Establish robust log analysis pipelines to ensure comprehensive visibility into environment logs and system telemetry
• AI & Automation Integration: Leverage modern AI tools and automation frameworks to streamline incident detection, reduce false positives, and automate routine operational tasks, maximizing the efficiency of our security infrastructure
• Threat Intelligence & Dissemination: Contribute to the meaningful development of a proactive threat intelligence review process. Keep the EIT team informed on relevant, emerging security trends and distill this data into actionable guidance for other teams across the company
• Secure Provisioning & Hardening: Own the initial setup, secure configuration, and baseline hardening of new infrastructure, applications, and corporate systems across the enterprise
• Operational Turnover & Documentation: Develop clean, repeatable documentation and runbooks to seamlessly transition newly hardened systems over to the Support team for day-to-day maintenance, eliminating single points of failure
• Operational Systems Engineering: Manage high-level systems work, application onboarding, and lifecycle ownership within EIT to maintain continuous attack surface visibility
• Cross-Functional Collaboration: Partner closely with the IT Support lane to establish seamless handover workflows, share threat intelligence, and collaborate on routine incident response procedures to ensure enterprise-wide operational resilience
• DevOps Escalation Triage: Serve as the first point of contact for security-related findings and requests currently escalated ad hoc into DevOps (Shared Services/R&D) tickets. Own initial triage, resolve what can be resolved within SecOps, and only forward to DevOps what genuinely requires their ownership — reducing the unpredictable inbound load this creates for that team today

Requirements:

• CANDIDATES MUST BE LOCATED IN THE UNITED STATES or CANADA
• 6–8 years of experience in Systems Administration, Systems Engineering, or IT Operations, with a proven track record of shifting your career focus into security operations
• Proven experience configuring SIEM platforms, managing log aggregation, and building effective alerting logic
• Hands-on experience using automation scripts, tools, or AI-driven capabilities to optimize security operations and workflows
• Deep technical knowledge of securing cloud environments, network configurations, identity providers (IdP), and enterprise SaaS ecosystems
• Proven ability to lead cross-functional technical projects, interface with external third-party security vendors, and translate raw vulnerability data into actionable remediation steps
• Exceptional ability to break down complex system architectures into clear runbooks, and the communication skills necessary to translate technical threat intel into digestible updates for non-technical company teams
• Security-focused certifications (e.g., Security+, CEH, GISF) or Cloud/Systems certifications (AWS, Google) are highly valued