Senior Security Engineer detecting, investigating, and responding to security threats at Greenlight. Collaborate with teams to improve security operations and tooling in a cloud-native environment.
Responsibilities
Serve as a frontline responder for security incidents — triage alerts, lead investigations, coordinate cross-functional response efforts, and drive post-incident reviews and remediation
Monitor and tune security tooling and detection rules to identify threats across our cloud infrastructure and applications; reduce false positives and improve signal quality
Perform proactive threat hunting to identify attack patterns, anomalous behavior, and gaps in detection coverage
Support and maintain security controls across our AWS environment, including monitoring for misconfigurations, access issues, and infrastructure risks
Contribute to building and improving security automation, scripts, and internal tooling to reduce manual overhead and enhance operational efficiency; grow into deeper engineering contributions over time
Own the enterprise vulnerability management program, establishing risk-based prioritization frameworks and driving organization-wide remediation strategies
Spearhead AI/ML integration and automation initiatives to transform security operations, reduce manual overhead, and enhance detection capabilities
Assist with and contribute to AI-driven security initiatives and automation efforts within the team
Support ongoing security compliance, audit, and certification programs (e.g., PCI, SOC2)
Work closely with engineering, infrastructure, and product teams to provide security guidance and support security-by-design practices
Participate in team knowledge sharing, document runbooks and playbooks, and contribute to continuous improvement of SecOps processes
Participate in on-call rotation and serve as a first responder to security event escalations
Requirements
6+ years of experience in security operations, incident response, or a security analyst role, preferably in cloud-centric environments
Strong hands-on experience with incident response and investigation alert triage, forensic analysis, root cause determination, and remediation
Solid understanding of common attack vectors, threat intelligence fundamentals, and attacker tactics, techniques, and procedures (TTPs)
Working knowledge of cloud security fundamentals (AWS) IAM, VPC, CloudTrail, GuardDuty, Security Hub, or equivalent services
Familiarity with TCP/IP protocols, network analysis, and common network/security tooling (SIEM, EDR, IDS/IPS)
Demonstrated ability to identify exploits, vulnerabilities, and misconfigurations and drive remediation in cloud and server environments
Growth mindset genuine interest in developing engineering skills (scripting, automation, tooling) and growing beyond a pure analyst role
Ability to participate in an on-call rotation and respond to security event escalations
Team player comfortable collaborating across India and US teams (primarily PST timezone)
Infrastructure Security Operations Analyst overseeing security risks for Terumo’s digital landscape across EMEA. Ensuring robust security measures while collaborating with stakeholders in a global environment.
Infrastructure Security Operations Analyst at Terumo safeguarding digital and operational technology across EMEA. Collaborating with external partners and maintaining security standards.
Overseeing Security Operations Team's strategies and implementations for interactive investor. Ensuring protection of key business assets through analysis and incident response.
Senior Security Engineer managing perimeter security operations for Fanatics' global e - commerce platform. Focus on operations, detection, automation, and reliability across multiple CDN and networking layers.
SOC Analyst Level 2 role focusing on security incidents and response plans in a hybrid environment. Working with cross - functional teams to enhance security practices and incident handling.
Cybersecurity Analyst monitoring network and system activity at AT&T to detect and respond to cyber threats. Participating in incident response and threat analysis for US Government Program.
Journeyman Cyber Security Analyst monitoring network and responding to cyber threats. Engaging with US Government Program for IT Services related to Cyber Security in Omaha, Nebraska.
Security Operations Consultant delivering security monitoring and incident response services through Microsoft Sentinel. Collaborating with clients and teams to enhance security posture in hybrid and cloud environments.
Security Operations Engineer supporting monitoring, investigation and response to security threats in IT systems. Join the Information Security team for a 9 - month fixed - term contract based in London.