Founding Security Engineer: SIEM, Cloud & IR Leader

Edison Scientific; San Francisco (CA); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401(k) contribution

Parental leave

Wellness stipend

Commuter benefits

Job summary

Edison Scientific is seeking its founding Security Operations Engineer to build and scale our security program from the ground up. This hands-on role partners with IT & Security to design security across cloud, identity, applications, endpoints, and incident response.

You'll lead technical execution with ownership, mentorship, and a practical security program that grows with the company. On-site in San Francisco, hybrid OK.

Qualifications

• 5+ years in Security Engineering, Security Operations, Incident Response, or related cybersecurity roles.
• Hands-on AWS and GCP security experience.
• Experience with SIEM, EDR, detection engineering, and threat hunting.
• Strong knowledge of identity security, cloud IAM, and Zero Trust.
• Experience securing Kubernetes, Docker, and Infrastructure-as-Code.
• Knowledge of API Security and OWASP Top 10.
• Experience developing security metrics, KPIs, dashboards, and executive-level reporting.
• Familiarity with SOC 2 or similar frameworks.
• Excellent communication and cross-functional collaboration.

Responsibilities

• Security Operations & Incident Response: Build and mature the company’s security operations program.
• Design, implement, and continuously improve SIEM, EDR, and endpoint security capabilities.
• Develop, tune, and maintain detections across cloud, endpoint, identity, and SaaS platforms.
• Lead technical incident investigations while collaborating on incident response planning and post-incident reviews.
• Cloud, Identity & Infrastructure Security: Design and improve AWS and GCP security posture.
• Lead identity security across Okta, Google Workspace, cloud IAM, privileged access, MFA, and SSO.
• Secure Kubernetes, Docker, and Infrastructure-as-Code environments.
• Design and maintain centralized security logging and telemetry.
• Application Security: Lead the vulnerability management program and secure software development practices.
• Lead security awareness initiatives, phishing simulations, and tabletop exercises.
• Evaluate emerging AI technologies to improve security operations.

Skills

5+ years experience

AWS security

GCP security

SIEM & EDR

Threat hunting

Identity security

Zero Trust

Kubernetes security

Docker security

IaC security

API security (OWASP Top 10)

Security metrics & dashboards

SOC 2 familiarity

Cross-functional collaboration

Job description

Edison Scientific is seeking its founding Security Operations Engineer to build and scale our security program from the ground up. This hands-on role partners with IT & Security to design security across cloud, identity, applications, endpoints, and incident response.

You'll lead technical execution with ownership, mentorship, and a practical security program that grows with the company. On-site in San Francisco, hybrid OK.