Security Operations Engineer

Mesh; Eu; Hybride; EUR 121 000 - 164 000; Plein temps

Avantages offerts par ce poste

Unlimited PTO

Budget for courses and certifications

Remote-friendly work

Equity as part of compensation

Résumé du poste

Mesh is seeking a Security Ops Engineer to design, implement, and operate security controls across our infrastructure, systems, and workflows. You will lead threat modeling, incident response, and proactive defense while collaborating with engineering, infra, and product teams to strengthen our security posture.

You will implement robust security architecture, analyze threats, review code, and drive remediation with a hands-on mindset.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, or related field.
• 5–7+ years building defensive security systems or security operations.
• Experience with threat modeling and incident response leadership.
• Experience managing vulnerabilities from discovery to remediation.
• Knowledge of SIEM/SOAR platforms and rule writing.
• Knowledge of cloud security and network security concepts.

Responsabilités

• Design, deploy and maintain core defensive security controls and guardrails.
• Perform threat analysis from attacker perspective to reduce risk.
• Review code and system changes for security risks.
• Lead vulnerability tracking and remediation with engineering teams.
• Manage SIEM/SOAR platforms for detection and response.
• Write and tune detection rules to minimize false positives.
• Lead investigations and document findings for audits and reviews.
• Support compliance and evidence collection for regulatory needs.
• Stay current on emerging threats and security best practices.

Connaissances

Threat modeling

Incident response

Security architecture

Threat detection

KQL

SPL

Security reviews

Formation

Bachelor's degree in Computer Science or Cybersecurity

Outils

Sumo Logic

Splunk

Azure Sentinel

Datadog

Docker

Kubernetes

Description du poste

About Mesh

At Mesh, our mission is to enable consumers to pay and be paid with any asset. Today, trillions of dollars in tokenized assets exist but remain largely unusable for everyday commerce. Mesh is bridging this gap by making crypto payments reliable, useful, and ubiquitous. We combine a powerful orchestration engine with a seamless consumer app to unlock liquidity for the world. Backed by leading investors like PayPal Ventures, Paradigm, and Galaxy Ventures, we are building the infrastructure for the next era of the global economy. Join us!

Overview

As a Security Ops Engineer, you will be a hands-on technical builder and responder responsible for designing, implementing, and operating security controls across our infrastructure, systems, and operational workflows. This role spans building robust security architecture, conducting threat modeling, analyzing attack vectors from an analyst's perspective, and driving active incident response. While you should understand code and participate in security reviews, your primary focus is implementing security systems, detecting threats and leading response efforts. You will work autonomously across engineering, infrastructure and product teams to strengthen our defensive posture and ensure rapid effective response when security events occur.

What You’ll Do

• Implement Security Controls and Architecture by designing, deploying, and maintaining core defensive systems, security integrations and infrastructure guardrails.
• Perform Threat Analysis and Modeling by evaluating system architectures from an attacker’s perspective, identifying key attack surfaces and building practical defensive mitigations.
• Conduct Practical Code and System Reviews by evaluating new features and integration architectures for security risks, leveraging code comprehension to improve overall security posture.
• Manage Vulnerability Remediation by tracking findings from scans, pentests, and bug reports, prioritizing by risk and driving fixes to closure with engineering owners.
• Own Security Operations Platform Management by administering, configuring and maintaining SIEM/SOAR platforms for threat detection and incident response.
• Engineer Detection Rules and Alerts by writing, tuning and optimizing detection queries to identify real threats while minimizing false positives.
• Conduct Security Investigations and Incident Response by analyzing alerts performing forensic analysis and managing escalation and communication during active incidents.
• Document Findings by producing clear reports for security reviews threat models and incident investigations that support institutional knowledge and audits.
• Support Compliance and Evidence Collection by ensuring security events review findings and remediation work are properly logged and available for audit and regulatory requirements.
• Maintain Operational Readiness by staying current on emerging threats attack techniques and security engineering practices relevant to our infrastructure and threat model.

Who You Are

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 5–7+ years of hands‑on experience building defensive security systems, implementing security controls or operating in security response environments.
• Strong technical background in understanding attack techniques performing threat analysis and leading incident response efforts.
• Experience managing vulnerability findings from identification through remediation.
• Working knowledge of SIEM/SOAR platforms and writing detection rules (e.g. SPL, KQL or similar).
• Deep understanding of network host application and cloud security concepts.
• Strong written and verbal communication skills with the ability to clearly document findings and escalation issues.
• Ability to work independently with minimal supervision in a fast paced environment.
• Experience collaborating with small international teams across multiple time zones.
• Willingness to work outside normal business hours when needed for incident response.

Nice to have

• Familiarity with threat modeling frameworks (e.g. STRIDE MITRE ATT&CK).
• Experience implementing automated security controls and infrastructure security tooling.
• Hands‑on experience with SIEM platforms at scale (Sumo Logic Splunk Azure Sentinel Datadog or similar).
• Experience with cloud security monitoring AWS Azure GCP and native security services.
• Exposure to containerized environments Docker Kubernetes and securing cloud‑native workloads.
• Familiarity with security and compliance frameworks ISO 27001/2 NIST SOC2 GDPR DORA.
• Experience with at least one object‑oriented programming language Python preferred.
• Experience with at least one query language such as KQL or similar.

Why You’ll Love It

At Mesh, you’re not stepping into a typical role— you’re joining a rocket ship in mid-liftoff. You’ll tackle complex meaningful problems that actually move an industry forward, working alongside a sharp motivated team that moves quickly collaborates deeply and expects everyone to operate with ownership. This is the kind of place where you’ll see your work ship fast make real impact and be able to point to something and say, "I built that." You’ll grow fast level up your skills and get a front row seat to how a large growth company scales from the inside, with competitive comp solid benefits and room to stretch your craft all coming standard. If you’re energized by building learning and shaping something big— this is where you’ll want to be.

In-Office Expectations

Employees based in our San Francisco New York and Bangalore hubs are expected to work from the office at least 40% of the time (approximately two days per week). This expectation may vary slightly depending on role team and business needs. Certain roles that require closer cross-functional collaboration or operational support may have additional in‑office requirements which will be discussed during the interview process. Our hybrid approach is designed to balance meaningful in‑person collaboration team building and real-time decision making with the flexibility to work remotely. We believe this structure supports strong execution while preserving autonomy and focus time.

How We Care For Our Team

We believe great work happens when people feel valued and supported. That starts with competitive salary and equity that grows as you and the company grow plus comprehensive health coverage for you and your family.

• We offer unlimited PTO—and we mean it.
• Take the time you need to recharge and show up at your best.
• We’re invested in your growth with a dedicated budget for courses conferences and certifications.
• Work from wherever you’re most productive with our remote‑friendly approach and count on having the top tier tools and equipment you need to do exceptional work.

Mesh Pay is committed to equal employment opportunities regardless of race color genetic information creed religion sex sexual orientation gender identity lawful alien status national origin age marital status and non‑job related physical or mental disability or protected veteran status Pursuant to the San Francisco Fair Chance Ordinance we will consider for employment qualified applicants with arrest and conviction records.