Remote Staff Security Engineer: Cloud & IR Ops

Cybersecurity Jobs; United States; Remote; USD 167,000 - 213,000; Full time

Benefits offered by this job

Bonus eligibility

Equity

Job summary

GoodLeap is seeking a Staff Security Engineer for Security Operations to protect cloud environments, applications, endpoints, and corporate systems through detection engineering, incident response, and security operations. You will lead investigations, expand automation with AI agents, and improve time-to-detect and time-to-respond.

Responsibilities include designing detections across cloud and endpoints, managing SIEM pipelines, and mentoring the team on best practices.

Qualifications

• Hands-on detection engineering experience with SIEM query languages and detection-as-code.
• Hands-on incident response experience including log analysis and cloud forensics.
• Familiarity with MITRE ATT&CK and OWASP Top 10.
• Experience building automation in Python and with LL M-based agents.

Responsibilities

• Design, build, test, and tune detections across cloud, identity, endpoint, and email telemetry.
• Lead end-to-end incident activity including investigation, containment, eradication, and recovery.
• Establish monitoring for AI activity and detection of data exposure and anomalous behavior.
• Deploy and operate security ops toolset including Cloud, WAF, IDS, and EDR.

Skills

Detection engineering

Incident response

Python

LLM agents

AWS cloud security

MITRE ATT&CK

OWASP Top 10

AI risk management

Tools

CrowdStrike Falcon

SIEM

Job description

GoodLeap is seeking a Staff Security Engineer for Security Operations to protect cloud environments, applications, endpoints, and corporate systems through detection engineering, incident response, and security operations. You will lead investigations, expand automation with AI agents, and improve time-to-detect and time-to-respond.

Responsibilities include designing detections across cloud and endpoints, managing SIEM pipelines, and mentoring the team on best practices.