Remote Security Operations Engineer II

Credit Acceptance Corporation; San Francisco (CA); Hybride; USD 102 000 - 142 000; Plein temps

Avantages offerts par ce poste

401(K) match

Tuition reimbursement

Parental leave

Résumé du poste

Credit Acceptance Corporation seeks a cybersecurity engineer to operate, maintain, and expand enterprise Cyber Defense platforms across endpoints, web, and cloud environments. You will triage alerts, support containment actions, and assist in developing automation and detection improvements.

The role requires hands-on scripting, API work, IaC, and strong documentation ability, with a hybrid work model and travel as needed to Credit Acceptance buildings.

Qualifications

• Bachelor's degree in computer science, Information Systems, Cybersecurity, or equivalent practical experience.
• Minimum 2 years of experience in cybersecurity engineering, security operations, incident response, or a related technical field.
• Experience triaging cybersecurity alerts or incidents and supporting approved containment actions.
• Experience with scripting and working with APIs, webhooks, or structured configuration files.
• Experience with version control and Infrastructure as Code concepts.
• Working knowledge of cloud services and cloud security logs.
• Ability to troubleshoot across multiple technologies and produce clear technical documentation.

Responsabilités

• Operate, maintain, and improve enterprise Cyber Defense platforms across endpoint, web, network, monitoring, and automation services.
• Maintain next-generation SIEM integrations; onboard telemetry and resolve ingestion, parsing, or data-quality issues.
• Maintain endpoint detection and response capabilities; support investigations and approved containment actions.
• Manage secure web access policies, inspection controls, and approved exceptions; troubleshoot access and performance issues.
• Support web application protections with network and application teams; help implement rules, logging, integrations, and approved exceptions.
• Perform initial triage of cybersecurity alerts and incidents; gather evidence, document findings, determine scope, and elevate as needed.
• Support approved containment, remediation, and recovery actions across enterprise and cloud environments.
• Develop and tune detection logic to improve signal quality and investigative value.
• Build response playbooks and automate repeatable investigation and response tasks using scripting, APIs, and webhooks.
• Use Infrastructure as Code, version control, testing, and change-management practices to maintain approved Cyber Defense resources.
• Use AI-assisted work flows to improve analysis and efficiency while applying access controls, testing, human oversight, and audit requirements.
• Monitor platform health; maintain technical documentation; share knowledge; and participate in security projects and the on-call rotation.

Connaissances

Cybersecurity engineering

Security operations

Incident response

Scripting & APIs

Infrastructure as Code

Cloud security

Documentation

Formation

Bachelor's degree in CS/IS/Cybersecurity

Outils

SIEM

EDR

WAF

Automation tooling

APIs & integrations

Description du poste

Credit Acceptance Corporation seeks a cybersecurity engineer to operate, maintain, and expand enterprise Cyber Defense platforms across endpoints, web, and cloud environments. You will triage alerts, support containment actions, and assist in developing automation and detection improvements.

The role requires hands-on scripting, API work, IaC, and strong documentation ability, with a hybrid work model and travel as needed to Credit Acceptance buildings.