Security Engineer III

veeamsoftware; United States; Remote; USD 206,000 - 343,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Retirement matching

Paid parental leave

Paid time off

Mental health resources

Professional learning

Job summary

Veeam Software in the United States seeks a security engineering lead to own cloud threat detection and response for a security-focused SaaS platform on Azure and AWS. You will build telemetry foundations, detections, automated response workflows, and cloud controls.

Design a security data lake, develop detections as code, automate triage, harden cloud environments, deliver reusable Terraform modules, and coordinate remediation against threat frameworks.

Qualifications

• At least five years in security engineering, cloud operations, or detection engineering, including recent hands-on ownership of production cloud security work.
• Production experience with Terraform, including authoring and maintaining modules used by other teams.
• Operational depth across Azure and AWS, including identity, audit logging, and cloud security controls.
• Ability to build and maintain detections, pipelines, and response automation; Python is used for tooling and enrichment.
• Familiarity with detection-as-code practices, Git-based review, and CI/CD delivery.
• Ability to work closely with SRE, product engineering, and security colleagues to turn findings into lasting fixes.

Responsibilities

• Own cloud threat detection and response engineering for a security-focused SaaS platform running across Azure and AWS.
• Design a security data lake that brings together cloud, SaaS, and endpoint telemetry, with practical choices for normalization, retention, query speed, and cost.
• Develop detections as code, managing each rule from hypothesis and testing through deployment, performance measurement, and retirement.
• Automate alert triage and enrichment, connect runbooks to response tools, and improve detection and response times.
• Harden Azure and AWS environments through identity boundaries, network controls, secrets handling, logging, and exposure management.
• Deliver reusable cloud security controls through Terraform modules and CI/CD pipelines.
• Coordinate remediation of cloud posture findings and assess detection coverage against a recognized threat framework.

Skills

Security engineering

Cloud operations

Detections as code

Python scripting

CI/CD

Git workflows

Tools

Terraform

Azure

AWS

CI/CD tooling

Git

Python

Job description

Role overview

Own cloud threat detection and response engineering for a security-focused SaaS platform running across Azure and AWS. You'll build the telemetry foundations, detections, automated response workflows, and cloud controls that help teams find threats quickly and prevent recurring security issues.

Responsibilities

• Design a security data lake that brings together cloud, SaaS, and endpoint telemetry, with practical choices for normalization, retention, query speed, and cost.
• Develop detections as code, managing each rule from hypothesis and testing through deployment, performance measurement, and retirement.
• Automate alert triage and enrichment, connect runbooks to response tools, and improve detection and response times.
• Harden Azure and AWS environments through identity boundaries, network controls, secrets handling, logging, and exposure management.
• Deliver reusable cloud security controls through Terraform modules and CI/CD pipelines.
• Coordinate remediation of cloud posture findings and assess detection coverage against a recognized threat framework.

Requirements

• At least five years in security engineering, cloud operations, or detection engineering, including recent hands-on ownership of production cloud security work.
• Production experience with Terraform, including authoring and maintaining modules used by other teams.
• Operational depth across Azure and AWS, including identity, audit logging, and cloud security controls.
• Ability to build and maintain detections, pipelines, and response automation; Python is used for tooling and enrichment.
• Familiarity with detection-as-code practices, Git-based review, and CI/CD delivery.
• Ability to work closely with SRE, product engineering, and security colleagues to turn findings into lasting fixes.

Benefits and work setup

The role lists a target compensation range of $205,920-$343,200 USD, including performance-based bonus. Benefits include medical, dental, and vision coverage from the first day, retirement matching, paid parental leave, paid time off, mental health resources, and professional learning opportunities.