[Hiring] Senior Corporate Security Operations Engineer @Attentive

Role Description

As a Senior Corporate Security Operations Engineer you will help protect our workforce, corporate systems, identities, endpoints, SaaS applications, and business operations. This is a hands-on role spanning both Security Operations and Corporate Security, with a primary focus on incident response and security investigations.

• Investigate security incidents and suspicious activity.
• Operate and improve security controls across our corporate environment.
• Support third-party and customer security workflows.
• Partner closely with Security Engineering, IT, Legal, GRC, Procurement, and Engineering.
• Combine operational security with engineering.
• Comfortable moving between various security-related tasks.

Qualifications

• 5+ years of experience in Security Operations, Incident Response, Corporate Security, Detection & Response, Security Engineering, or a related security discipline.
• Strong hands-on experience investigating security incidents and suspicious activity.
• Experience with identity, endpoint, SaaS, email, and security-monitoring telemetry.
• Strong understanding of common attacker tactics, techniques, and procedures.
• Experience with SIEM, EDR, identity, and enterprise SaaS security technologies.
• Ability to independently scope investigations, gather evidence, assess risk, and determine next steps.
• Experience with vendor security reviews, third-party risk, customer security questionnaires, or similar security-assurance work.
• Experience using scripting, APIs, automation, or integrations to improve security operations.
• Strong written and verbal communication skills and the ability to work effectively across technical and business teams.
• Experience with Python, Go, Bash, or similar scripting languages.

Requirements

• Lead and support security investigations and incident response involving account compromise, phishing and smishing, endpoint threats, suspicious SaaS activity, credential exposure, third-party applications, and other corporate security events.
• Monitor and investigate alerts across identity, endpoint, SaaS, email, SIEM, and other security platforms.
• Perform technical triage, determine severity and escalation paths, identify noisy detections or telemetry gaps, and partner with Security Engineering to improve detection and response quality.
• Lead and manage complex Corporate Security projects to improve controls across identity, endpoint, browser, SaaS, and Zero Trust, while proactively assessing and mitigating risk to maintain an acceptable security posture.
• Perform technical security assessments of software vendors and third-party integrations, review security evidence and controls, work with vendors and internal stakeholders to resolve gaps, and support risk-based approval, exception, or escalation decisions.
• Support customer security questionnaires, RFPs, and trust requests by providing accurate security responses, gathering supporting evidence, and partnering with the appropriate subject-matter experts for complex product, cloud, data, privacy, AI, or architecture questions, ensuring established response SLAs are consistently met.
• Improve Security Operations through automation, scripting, integrations, dashboards, workflow improvements, alert enrichment, and evidence collection.
• Participate in on-call rotation, maintain and improve incident response runbooks and playbooks, contribute to tabletop exercises, and help strengthen overall incident readiness.
• Communicate clearly with technical and non-technical stakeholders, document investigations and risk decisions, and collaborate across Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success.

Benefits

• Competitive perks and benefits, from health & wellness to equity.
• US base salary range for this full-time position is $140,000 - $207,000 annually + equity + benefits.
• Salary ranges are determined by role, level, and location.