SecOps Engineer - SIEM, IR & Cloud Security

Papaya Global; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Papaya Global is seeking a SecOps Engineer to join our cybersecurity team. You will defend the organization end-to-end across cloud, endpoints, identities, and applications, while maturing our security operations capability.

This hands-on role involves investigation of complex problems, building repeatable security operations in a growing cloud-native environment, and occasional after-hours incident response as required.

Qualifications

• 3 years of hands-on experience in security operations or similar cybersecurity roles.
• Experience with IT security, endpoint protection, identity security, and security operations.
• Hands-on experience with SIEM, alert triage, investigation, dashboards, and detection tuning.
• Strong cloud security knowledge across major cloud platforms.
• Experience with incident response and DFIR workflows on Windows, Linux, macOS.
• Proficiency in Python, Bash, and PowerShell for automation.
• Familiarity with SOAR platforms and automated playbooks.
• Strong communication and cross-team collaboration.
• Willingness to participate in after-hours response.

Responsibilities

• Operate and improve the security operations stack including SIEM, identity, endpoint, cloud, and application telemetry.
• Investigate alerts and threats via triage, DFIR, and threat hunting.
• Lead incident response from detection through containment, recovery, and post-incident review.
• Build and tune detection rules, SIEM queries, and dashboards for high‑risk attack paths.
• Automate response and enrichment workflows with scripting and SOAR.
• Support security reviews of vendors and SaaS platforms, and partner with engineering to validate controls.
• Assist with security monitoring for AI-enabled workflows and related tooling.
• Develop agentic playbooks and evidence correlation workflows during investigations.
• Evaluate AI-assisted investigation tools for accuracy and performance.

Skills

Security operations

Incident response

Detection engineering

Cloud security

Python

Bash

PowerShell

SOAR platforms

Threat hunting

Communication skills

Tools

SIEM platforms

SOAR platforms

AI tools

Cloud security tooling

Job description

Papaya Global is seeking a SecOps Engineer to join our cybersecurity team. You will defend the organization end-to-end across cloud, endpoints, identities, and applications, while maturing our security operations capability.

This hands-on role involves investigation of complex problems, building repeatable security operations in a growing cloud-native environment, and occasional after-hours incident response as required.