Security Engineer III - Security Operations

Jobgether; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work: Fully remote

Equity

Paid time off: 25+ days

Coworking access

Team events and retreat

High-quality equipment

Home office stipend

Learning budget

Private medical insurance

Location-based perks

Job summary

Jobgether is listing a fully remote Security Engineer III - Security Operations role for the United States. You will own detection and response capabilities, build SIEM detections in Elastic and AWS, automate response workflows with Python, and improve security tooling and runbooks while collaborating with a distributed team.

In this role you will triage alerts, investigate incidents, document findings, and help drive security maturity across compliance frameworks.

Qualifications

• Hands-on experience building, tuning, and maintaining SIEM detections.
• Practical experience securing AWS environments and cloud-native detection.
• Proficiency in Python for scripting and tooling.
• Experience with Terraform or similar IaC technologies.
• Familiarity with MITRE ATT&CK framework and threat detection.
• Strong written communication for investigations and risk decisions.

Responsibilities

• Plan and deliver end-to-end detection and response initiatives.
• Build and maintain detections across Elastic SIEM and AWS.
• Triage alerts, investigate incidents, and drive issues to resolution.
• Document investigations and findings for follow-up actions.
• Develop runbooks and automation with Python and no-code tools.
• Participate in on-call rotation for monitoring and response.
• Support audit-ready security controls for SOC 2 and PCI DSS.

Skills

SIEM detection

Python scripting

Incident response

Threat detection

Cloud security

MITRE ATT&CK

Tools

Elastic SIEM

AWS

Terraform

Python

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer III - Security Operations based in the United States.

Join a globally distributed engineering team focused on protecting critical cloud infrastructure and strengthening security operations within a modern payments environment. As a Security Engineer III, you will take ownership of key detection and response capabilities, helping identify emerging threats, investigate incidents, and improve security coverage. You will build and optimize SIEM detections, automate response workflows, and develop reliable security tooling using Python and infrastructure-as-code practices. Working across cloud infrastructure, compliance, and incident response, you will help reduce operational risk while making security processes more efficient. This role offers meaningful technical ownership, opportunities to improve security maturity, and collaboration with a team that values autonomy, continuous learning, and clear communication.

Accountabilities

• Plan and deliver end-to-end detection and response initiatives, from creating detection rules to implementing automated response workflows.
• Build, tune, and maintain security detections across Elastic SIEM and AWS environments, identifying and closing gaps in existing threat coverage.
• Manage the security investigation queue by triaging alerts, investigating suspicious activity, escalating incidents when necessary, and driving issues toward resolution.
• Document incident investigations and findings clearly to support follow-up actions, knowledge sharing, and operational consistency.
• Develop and maintain runbooks and automation workflows using Python and no-code tools such as Zapier or Tines to reduce manual work and accelerate incident response.
• Make and document risk decisions within your area of responsibility, escalating issues when additional expertise or support is required.
• Support compliance initiatives by maintaining audit-ready security controls and contributing evidence for frameworks such as SOC 2 and PCI DSS.
• Use Terraform and Python to build, maintain, and improve the infrastructure supporting security detections and operational tooling.
• Participate in the on-call rotation for security monitoring and incident response.
• Continuously improve detection coverage, investigation processes, and response efficiency.

Requirements

• Hands-on experience building, maintaining, and tuning SIEM detections. Experience with Elastic is preferred, while Splunk, Microsoft Sentinel, or comparable platforms is also relevant.
• Practical experience securing AWS environments and implementing cloud-native detection and response capabilities.
• Proficiency in Python for scripting, automation, and security tooling.
• Experience with Terraform or other infrastructure-as-code technologies.
• Working knowledge of the MITRE ATT&CK framework and its application to threat detection and investigation.
• Demonstrated experience triaging, investigating, and resolving security incidents.
• Strong written communication skills, with the ability to document investigations, technical findings, and risk decisions in a clear, structured manner.
• Ability to work independently, prioritize security issues, and take ownership of assigned responsibilities.
• Willingness to participate in an on-call rotation for monitoring and incident response.

Nice To Have

• Experience with security orchestration, automation, and response (SOAR) platforms or no-code security automation tools.
• Familiarity with compliance frameworks such as PCI DSS, SOC 2, or ISO 27001.
• Experience in fintech, payments, or another regulated industry.

Benefits

• Remote work: Fully remote working environment within a globally distributed team.
• Equity: Competitive share options.
• Paid time off: Flexible holiday policy, with a minimum of 25 days to be taken.
• Coworking access: Access to coworking spaces across major cities.
• Team events: Workations and an annual company retreat.
• Equipment: High-quality equipment suited to your role.
• Home office support: £500 contribution toward your home office setup.
• Learning and development: Generous learning budget to support continued professional growth.
• Healthcare: Private medical insurance.
• Additional perks: A range of other benefits depending on location.
• Professional support: Structured onboarding and a collaborative environment that encourages learning and shared problem-solving.

How Jobgether Works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice:

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.