Senior Security Operations Engineer — AI-Driven Defenses

Fleetio; México; On-site; MXN 1,200,000 - 1,800,000; Full time

Job summary

Fleetio is seeking a Senior Security Operations Engineer to own end‑to‑end security for tools, devices, identities and data used daily by Fleetio. You’ll build detections, write response playbooks, and automate security workflows across CrowdStrike, Okta, Mimecast and Google Workspace.

You will work with IT Operations, Compliance and a 3rd party SOC to keep Fleetio secure. The role demands hands‑on engineering, strong incident response leadership, and the ability to drive security decisions with

Qualifications

• Experience building detections and response playbooks.
• Ability to wire tools together to create integrated security workflows.
• Strong incident response and forensics capabilities with calm under pressure.
• Familiarity with AI in security operations and triage automation.
• Ability to communicate risk and decisions clearly to technical and non-technical stakeholders.

Responsibilities

• Own detection engineering for identity, email, SaaS, and endpoint telemetry.
• Own security automation, linking tools to trigger automatic enrichment and containment.
• Lead corporate incident response, including third‑party and supply‑chain events.
• Manage Falcon configuration, detections, and device trust checks.
• Own Okta authentication policy, MFA, and privileged access management processes.
• Own Mimecast policy, Google Workspace security settings, and SaaS posture.
• Define and tune DLP policies across email, endpoints, and SaaS apps.
• Own security for Fleetio's AI usage and agent governance.

Skills

Detection engineering

Threat hunting

Incident response

Security automation

Okta

CrowdStrike

Mimecast

Google Workspace

Data loss prevention

AI security

Tools

CrowdStrike Next-Gen SIEM

CrowdStrike Fusion SOAR

Mimecast

Google Workspace

Okta

Falcon Complete

Job description

Fleetio is seeking a Senior Security Operations Engineer to own end‑to‑end security for tools, devices, identities and data used daily by Fleetio. You’ll build detections, write response playbooks, and automate security workflows across CrowdStrike, Okta, Mimecast and Google Workspace.

You will work with IT Operations, Compliance and a 3rd party SOC to keep Fleetio secure. The role demands hands‑on engineering, strong incident response leadership, and the ability to drive security decisions with