[Hiring] Security Operations Engineer @SafelyYou

Role Description

As the SecOps Engineer, you will be a key technical executor and operational anchor within the Security Operations function of the Enterprise Information Technology (EIT) department. This role is designed for a high-level individual contributor who owns the technical execution, systems hardening, and lifecycle management of our internal platforms.

This position is being established to drive systemic maturity across our infrastructure. By taking ownership of application onboarding, systems administration, and infrastructure hardening, you will establish a resilient baseline that allows our security function to proactively scale and maintain strong operational rigor.

You'll be operating primarily within an AWS cloud environment and Google Workspace, alongside a modern toolchain spanning:

• Infrastructure-as-code for provisioning and change management
• Identity and access management across enterprise and customer-facing systems
• Continuous compliance and audit automation
• An observability stack for logging, monitoring, and alerting

Key Responsibilities

• Security Project Management: Act as the primary internal technical lead for upcoming third-party security assessments and external vulnerability testing, driving vendor coordination, timeline management, and remediation tracking.
• SIEM & Log Analysis Architecture: Lead the design, implementation, and ongoing management of our Security Information and Event Management (SIEM) capability. Establish robust log analysis pipelines to ensure comprehensive visibility into environment logs and system telemetry.
• AI & Automation Integration: Leverage modern AI tools and automation frameworks to streamline incident detection, reduce false positives, and automate routine operational tasks, maximizing the efficiency of our security infrastructure.
• Threat Intelligence & Dissemination: Contribute to the meaningful development of a proactive threat intelligence review process. Keep the EIT team informed on relevant, emerging security trends and distill this data into actionable guidance for other teams across the company.
• Secure Provisioning & Hardening: Own the initial setup, secure configuration, and baseline hardening of new infrastructure, applications, and corporate systems across the enterprise.
• Operational Turnover & Documentation: Develop clean, repeatable documentation and runbooks to seamlessly transition newly hardened systems over to the Support team for day-to-day maintenance, eliminating single points of failure.
• Operational Systems Engineering: Manage high-level systems work, application onboarding, and lifecycle ownership within EIT to maintain continuous attack surface visibility.
• Cross-Functional Collaboration: Partner closely with the IT Support lane to establish seamless handover workflows, share threat intelligence, and collaborate on routine incident response procedures to ensure enterprise-wide operational resilience.
• DevOps Escalation Triage: Serve as the first point of contact for security-related findings and requests currently escalated ad hoc into DevOps (Shared Services/R&D) tickets. Own initial triage, resolve what can be resolved within SecOps, and only forward to DevOps what genuinely requires their ownership — reducing the unpredictable inbound load this creates for that team today.

Definition of Success

• Operational Continuity: Streamline systemic workflows, allowing the proactive security function to operate efficiently without operational bottlenecks.
• Visibility & Telemetry Maturity: Successful deployment of SIEM tooling and establishment of clear logging standards that reduce time-to-detection.
• Seamless Handover: Quality of documentation and training provided to the Support team, ensuring zero friction or security gaps when a system is turned over for routine maintenance.
• Project Execution: Timely, structured execution of critical compliance and security initiatives, beginning with the upcoming enterprise assessment schedule.
• DevOps Load Reduction: Reduction in the volume and unpredictability of security-driven tickets landing directly on the DevOps team, with this role established as the first point of triage.

Qualifications

• 6–8 years of experience in Systems Administration, Systems Engineering, or IT Operations, with a proven track record of shifting your career focus into security operations.
• Proven experience configuring SIEM platforms, managing log aggregation, and building effective alerting logic.
• Hands-on experience using automation scripts, tools, or AI-driven capabilities to optimize security operations and workflows.
• Deep technical knowledge of securing cloud environments, network configurations, identity providers (IdP), and enterprise SaaS ecosystems.
• Proven ability to lead cross-functional technical projects, interface with external third-party security vendors, and translate raw vulnerability data into actionable remediation steps.
• Exceptional ability to break down complex system architectures into clear runbooks, and the communication skills necessary to translate technical threat intel into digestible updates for non-technical company teams.

Certifications (Plus)

• Security-focused certifications (e.g., Security+, CEH, GISF) or Cloud/Systems certifications (AWS, Google) are highly valued.

Benefits

• A mission-driven company culture
• Fully remote
• Competitive salary & benefits, including fully paid employee premiums for Medical, Dental, and Vision
• 401k Program
• Monthly Education, Well-being & WFH stipends
• Non-accrual PTO
• Growth Potential
• Company Retreats
• Medical & Family/Parental Leave