SecOps Engineer: Cloud, EDR, & Incident Response

Cellebrite; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Cellebrite seeks a SecOps Security Engineer to drive security operations, implement tools across endpoints, cloud, and network, and lead incident response. You will map threats per MITRE ATT&CK, develop mitigations, and evaluate new security tech while mentoring teammates.

Ideal candidates have 5+ years in security operations, strong scripting skills, and experience with Palo Alto, Prisma Access, Okta/Entra ID, and Wiz across AWS and other clouds.

Qualifications

• 5+ years hands-on security operations in 24x7 environments.

Responsibilities

• Design, implement, and maintain security tools across endpoints, identity, cloud, and network.
• Identify gaps and develop mitigation plans.
• Manage EDR/EPP, PAM/EPM, NAC, VPN, web proxy, and identity providers.
• Administer Palo Alto firewall and Prisma Access policies.
• Monitor AWS and other clouds for misconfigurations with CSPM/DSPM tools.
• Develop and maintain security policies and training materials.
• Provide Tier 3 security operations support and incident response.
• Apply MITRE ATT&CK to map threats and drive detection.
• Evaluate new security products and conduct POCs end-to-end.
• Leverage AI tools to improve security workflows with governance.
• Write scripts to automate security tasks and reporting.
• Collaborate with IT, R&D, and compliance teams.
• Mentor team members and share best practices.

Skills

EDR/EPP

PAM/EPM

NAC

Cloud security

Scripting

MITRE ATT&CK

AI tooling

Incident handling

Security policies

Communication

Education

CISSP

CISM

Bachelor's degree in CS/SEC

Tools

Python

Bash

Batch

Palo Alto

Prisma Access

Okta

Entra ID

Wiz

CMDB/CI

Job description

Cellebrite seeks a SecOps Security Engineer to drive security operations, implement tools across endpoints, cloud, and network, and lead incident response. You will map threats per MITRE ATT&CK, develop mitigations, and evaluate new security tech while mentoring teammates.

Ideal candidates have 5+ years in security operations, strong scripting skills, and experience with Palo Alto, Prisma Access, Okta/Entra ID, and Wiz across AWS and other clouds.