Lead Security Operations Engineer
RemoteUnited Kingdom or Spain
Job Summary
Build and own a structured SecOps roadmap grounded in MITRE ATT&CK, NIST, and CIS benchmarks to define detection, response, and investigation capabilities. Lead security investigations and digital forensics from suspicious traffic through full incident response, while designing, tuning, and scaling SIEM and logging pipelines to prevent signal loss. Strengthen perimeter and authentication postures via WAF configuration and authorization tuning, and protect sensitive data through DLP controls aligned with actual data locations. Improve on-call rotations by defining alerting paths and response SLAs, then automate detection and response workflows using code and AI to reduce manual toil. Reduce SecOps-attributed risk identified through compliance gaps and build dashboards providing visibility into response times and risk reduction. Work cross-functionally with engineers to translate threat models into shippable changes.
Required Qualifications
- 10+ years of experience in security operations, incident response, or a closely related discipline
- A strong development and engineering background
- Hands-on SOC and SIEM management experience
- Experience in scale-up environments
- A strong understanding of cloud architectures as we use AWS
- Demonstrated experience using AI and/or coding automation to get security controls built, implemented, and operating in practice
Desired Qualifications
- Fintech, payments, fraud, or trust & safety experience
- Exposure to highly regulated environments
- Backgrounds that tend to do well here: incident response, IR management, SOC engineering, security engineering, DevSecOps, red or blue team
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.