Security Operations Engineer – Remote-First

EPI Company; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Remote-first

In-person gatherings</name>

€5,000 learning budget

Job summary

EPI Company is seeking a hands-on security operations professional to protect payment infrastructure and investigate security alerts across cloud, identity, endpoint and application environments. The role blends incident response, threat hunting and detection engineering with close collaboration across security, engineering, DevOps and IT teams.

You will triage alerts, coordinate containment and recovery, conduct hypothesis-driven hunts using threat intel and MITRE ATT&CK, and improve detection

Qualifications

• Experience in security operations and incident response lifecycle.
• Proven ability to conduct threat hunts informed by attacker behavior and threat intel.
• Familiarity with MITRE ATT&CK framework and detection engineering.

Responsibilities

• Triage alerts and investigate security events across the organization’s environments.
• Coordinate incident response through preparation, identification, containment, eradication, recovery and lessons learned.
• Conduct hypothesis-driven threat hunts informed by attacker behavior, threat intelligence and MITRE ATT&CK.
• Improve detection coverage and tooling, including queries and rules for evolving signals.
• Communicate findings and response actions clearly to technical and non-technical colleagues.
• Contribute to operational incident response, including on-call responsibilities.

Skills

Security operations

Incident response

Threat hunting

Detection engineering

MITRE ATT&CK

Cloud security

Identity protection

Endpoint security

Education

Bachelor's degree in CS or related field

Tools

SIEM

EDR

Threat intelligence platforms

Job description

Role overview

Help protect payment infrastructure by investigating security alerts, responding to incidents and strengthening detection across cloud, identity, endpoint and application environments. The role combines hands‑on security operations with proactive threat hunting and detection engineering, in close partnership with security, engineering, DevOps, IT and operations teams.

Responsibilities

• Triage alerts and investigate security events across the organization’s environments.
• Coordinate incident response through preparation, identification, containment, eradication, recovery and lessons learned.
• Conduct hypothesis‑driven threat hunts informed by attacker behavior, threat intelligence and MITRE ATT&CK.
• Improve detection coverage and tooling, including queries and rules for ambiguous or evolving signals.
• Communicate findings and response actions clearly to technical and non-technical colleagues.
• Contribute to operational incident response, including on-call responsibilities.

Benefits and work setup

Remote‑first, with quarterly and annual in‑person team gatherings. Employees may work from another EU country for up to three months per year. The package includes salary, performance‑based bonus, benefits and a €5,000 annual learning budget.