Security Operations Engineer

Pax8 Philippines Inc.; Denver (CO); Híbrido; USD 120 000 - 170 000; Tempo integral

Resumo da oferta

Pax8 is seeking a Security Operations Engineer to strengthen our global cloud security posture. You will lead investigations of security events, validate detections, and drive containment and remediation across AWS, Azure, and Google Cloud environments.

Join a team tackling evolving threats with practical engineering, scripting in Python/PowerShell, and on-call readiness. The role blends in-office collaboration at the Denver area with remote support and enterprise-scale security initiatives.

Qualificações

• Experience leading security incident investigations from detection through containment and closure.
• Broad knowledge of Security Operations including incident response, cloud security, and vulnerability management.
• Ability to translate complex security topics into clear briefings for varied audiences.

Responsabilidades

• Lead the investigation of security events from detection to remediation and closure.
• Analyze signals from endpoint, cloud, and security platforms to determine actions.
• Develop detections and tools using Python/PowerShell; support AI-assisted enhancements while maintaining sound engineering judgment.
• Collaborate with IT, DevOps, and engineering teams across AWS, Azure, and Google Cloud environments.

Conhecimentos

Incident response

Cloud security

Threat intelligence

Vulnerability management

Data protection

Scripting (Python/PowerShell)

Security leadership

Risk communication

Formação académica

Bachelor's degree in a relevant field

Ferramentas

Microsoft Defender

Entra

Exchange

Purview

Wiz

Descrição da oferta de emprego

Security Operations Engineer | United States | Hybrid

Pax8 is hiring a Security Operations Engineer in the United States to strengthen security across our global cloud marketplace through intelligent detection, decisive response, and practical engineering.

Build, Protect and Innovate

Join a global Security Operations team tackling the challenges reshaping modern cybersecurity, from increasingly sophisticated attacks to the rapid adoption of artificial intelligence across the business.

This is more than an alert-response role. You'll investigate and mitigate threats, build security tools and detections, improve controls, and help secure how Pax8 develops and uses emerging technology. You'll gain the autonomy to shape meaningful security outcomes while growing alongside new tools, changing threats, and an ambitious global organization.

Hybrid | Denver Tech Center preferred | Typically two days per week in the office

Life at Pax8

We combine the energy of a technology scale-up with the reach of a global cloud marketplace. Our people value curiosity, practical innovation, shared ownership, and straightforward collaboration.

Explore the Pax8 US website and learn more about our mission, culture and people .

What You'll Take Ownership Of

• Lead the investigation of security events, from initial detection and technical validation through containment, remediation, and closure.
• Analyze signals from endpoint, corporate, cloud, managed detection, and other security platforms to determine what matters and what action is needed.
• Serve as a trusted security resource during local business hours while contributing to the team's incident-response and on-call coverage.
• Build and improve detections that help Pax8 identify attacks, suspicious activity, fraud, and emerging risks earlier.
• Create scripts and internal security tools using technologies such as Python and PowerShell, with artificial intelligence supporting rather than replacing sound engineering judgment.
• Work with information technology, development operations, and engineering teams to identify and resolve threats across Amazon Web Services, Microsoft Azure, and Google Cloud Platform environments.
• Assess vulnerabilities in context, determine their likely impact, and guide teams toward proportionate remediation.
• Strengthen vulnerability management through better controls, tooling, prioritization, and cross-functional coordination.
• Support data loss prevention, insider-risk management, file-exfiltration controls, and wider compliance requirements.
• Monitor relevant threat intelligence and translate complex developments into clear, useful briefings for internal and external audiences.
• Help identify and reduce fraud affecting Pax8 and the managed service providers within our partner ecosystem.
• Share expertise across the global Security Operations team, helping colleagues build capability and respond consistently.

The Impact You'll Make

Your work will help Pax8 respond confidently to threats across a global business operating across multiple regions and cloud environments. You'll improve the technology behind our defenses, strengthen the way teams manage risk, and help protect Pax8, our people, and our partners. You'll also influence how security keeps pace with rapid product innovation and artificial intelligence adoption, ensuring new ideas can move forward with thoughtful, effective safeguards.

What You'll Bring

• Substantial cybersecurity experience gained in complex enterprise environments, including work as a senior individual contributor or technical leader.
• Proven ownership of security incidents from detection through investigation, remediation, stakeholder coordination, and closure.
• Broad Security Operations knowledge, combined with depth in areas such as incident response, cloud security, threat intelligence, vulnerability management, fraud detection, or data protection.
• Hands-on experience with Microsoft security technologies such as Defender, Entra, Exchange, and Purview.
• Practical knowledge of cloud security across Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
• Experience using cloud security posture management tools such as Wiz or cloud-native security platforms.
• Demonstrated scripting or development capability using Python, PowerShell, or comparable technologies.
• The ability to use artificial intelligence tools thoughtfully while understanding, reviewing, and improving the underlying code.
• Experience partnering effectively with information technology, development operations, engineering, compliance, and business teams.
• A calm, structured approach to high-pressure or uncertain security situations.
• The ability to explain risk clearly to people with different technical backgrounds and guide them toward action.
• Clear written communication skills, including the ability to produce concise security intelligence and incident documentation.
• A degree in a relevant field, equivalent practical experience, or a combination of both.
• Cyber