Security Operations Engineer: Zero Trust & Cloud Defenses

Pure Storage, Inc.; Lehi (UT); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible time off

Wellness resources

Company-sponsored team events

Job summary

Everpure is seeking a Security Operations Engineer to reduce our global attack surface across cloud, endpoint, and SaaS. You will lead remediation, build automated, risk-based outcomes, and work with GISO to protect critical assets.

You will deploy Zero Trust controls (Zscaler ZIA/ZPA), automate credential detection in CI/CD, and craft high-fidelity alerts using Splunk. An in-office role with Santa Clara, CA or Lehi, UT options.

Qualifications

• Deep experience in security operations and vulnerability management in enterprise environments.
• Hands-on asset discovery and secrets detection tooling (runZero, TruffleHog, GitLeaks).
• Zero Trust platform setup (Zscaler ZIA/ZPA) and cloud security across AWS/GCP/Azure.
• Proficient in SIEM (Splunk) and scripting (Python/PowerShell/Bash).
• Experience with threat emulation mapped to MITRE ATT&CK and communicating risk to engineering.

Responsibilities

• Own the Vulnerability & Asset Lifecycle across cloud, container, and endpoint environments.
• Engineer Zero Trust connectivity and SSL inspection strategies and policy enforcement.
• Architect secrets detection in CI/CD pipelines and automate remediation in pipelines.
• Build and deploy detection queries in Splunk and enable automated triage via Python or SOAR.
• Conduct targeted adversary simulations (Atomic Red Team) to validate defenses.
• Translate risk into executive reports such as Fix Impact Reports.

Skills

Security Operations

Vulnerability Mgmt

Zero Trust

Asset Discovery

Automation & Scripting

Threat Emulation

Tools

runZero

TruffleHog

GitLeaks

Splunk

Python

PowerShell

Job description

Everpure is seeking a Security Operations Engineer to reduce our global attack surface across cloud, endpoint, and SaaS. You will lead remediation, build automated, risk-based outcomes, and work with GISO to protect critical assets.

You will deploy Zero Trust controls (Zscaler ZIA/ZPA), automate credential detection in CI/CD, and craft high-fidelity alerts using Splunk. An in-office role with Santa Clara, CA or Lehi, UT options.