Security -Sr Security Operations Engineer

WoodmenLife; Omaha (NE); Hybrid; USD 90,000 - 120,000; Full time

Job summary

WoodmenLife in Omaha, Nebraska, seeks a Security Operations Engineer or Sr. Security Operations Engineer to advance our cybersecurity program.

You will lead threat hunting, incident response, automation, and IAM initiatives within a collaborative Risk Division. The role blends hands-on engineering with mentoring, offering hybrid work and opportunities to shape security playbooks, detections, and AI-enabled workflows across enterprise systems.

Qualifications

• Associate degree or equivalent experience in information security or CS.
• At least 3 years in security operations, incident response, or security engineering.
• Experience with security monitoring, threat detection, and incident response.

Responsibilities

• Investigate and respond to cybersecurity incidents across enterprise systems.
• Perform triage, containment, eradication, recovery, and post-incident analysis.
• Develop and optimize detection rules and alerting capabilities.
• Build and maintain automated security workflows and playbooks.
• Support IAM provisioning and access governance initiatives.

Skills

Threat hunting

Incident response

Detection engineering

Automation development

Identity security

AI-enabled workflows

Security monitoring

Team collaboration

Education

Associate degree in Information Security or related field

Bachelor's degree in Information Security or related field

Tools

Microsoft Defender

Azure DevOps

Power Automate

Python

Tenable

SIEM platforms

Job description

Security Operations Engineer / Sr.

Risk Division | WoodmenLife

Location: Hybrid (Omaha, NE)

Reports To: Manager Security Operations

PLEASE NOTE: WoodmenLife will not sponsor applicants for work visas for this position. Applicants must be currently authorized to work in the United States on a full-time basis.

Why You'll Love This Role

WoodmenLife is seeking a Security Operations Engineer or Sr. Security Operations Engineer to help build and advance our modern cybersecurity operations program. This is an exciting opportunity for a security professional who enjoys solving complex challenges, investigating threats, developing automation, and leveraging emerging technologies such as AI to improve security outcomes.

In this role, you will play a critical part in protecting WoodmenLife's systems, applications, identities, and data. You'll work with modern security technologies, advanced detection platforms, security automation tools, AI-powered workflows, and Identity & Access Management solutions while helping strengthen the organization's overall security posture.

Whether hired at the Engineer or Senior Engineer level, you will have the opportunity to make a measurable impact through threat hunting, incident response, detection engineering, security automation, and identity governance initiatives.

At WoodmenLife, you'll join a collaborative team environment where continuous learning, innovation, and professional growth are encouraged. This role offers multiple career paths within cybersecurity engineering, security operations, identity security, and automation engineering.

About The Team

The Security Operations team is part of the Risk Division and is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the enterprise.

Current strategic initiatives include:

• Security automation and orchestration
• AI-assisted security operations
• Threat detection and response modernization
• Identity & Access Management modernization through ConductorOne
• Access governance and lifecycle automation
• Vulnerability management improvement
• Security monitoring and response optimization

Role Summary

The Security Operations Engineer / Sr. Security Operations Engineer is responsible for proactively identifying and responding to cybersecurity threats, validating security controls, improving detection capabilities, and supporting the secure operation of enterprise systems.

This role combines threat hunting, security monitoring, incident response, security engineering, automation development, and identity security. The successful candidate will help design and implement automated workflows, develop security playbooks and runbooks, optimize detection capabilities, and partner with stakeholders across the organization to strengthen WoodmenLife's cybersecurity posture.

Candidates hired at the Senior Engineer level will also serve as technical leaders, leading complex investigations, mentoring team members, and driving strategic security initiatives.

What You'll Do

Security Operations & Incident Response

• Investigate and respond to cybersecurity incidents across enterprise systems and environments.
• Perform triage, containment, eradication, recovery, and post-incident analysis activities.
• Conduct root cause analysis and document incident findings.
• Escalate and coordinate response efforts during critical security events.
• Continuously improve incident response procedures and operational readiness.

Threat Detection & Threat Hunting

• Proactively hunt for emerging threats and suspicious activity.
• Develop, tune, and optimize detection rules and alerting capabilities.
• Analyze network, cloud, endpoint, application, and identity-related security events.
• Leverage threat intelligence and security frameworks to enhance detection effectiveness.
• Identify attack patterns and security gaps before they become incidents.

Security Automation & AI Enablement

• Develop and maintain security automation workflows and orchestration processes.
• Build scripts and integrations using Python, PowerShell, or similar technologies.
• Design and maintain runbooks, playbooks, and response workflows.
• Leverage AI-powered tools, copilots, and agentic workflows to improve operational efficiency.
• Identify opportunities to reduce manual effort through automation and intelligent process design.

Identity & Access Management (IAM)

• Support Identity Governance and Administration initiatives.
• Manage identity lifecycle processes including provisioning, deprovisioning, and access changes.
• Support access reviews, certifications, and governance activities.
• Implement and maintain least-privilege access controls.
• Partner with stakeholders to strengthen enterprise identity security practices.

Security Engineering & Tool Optimization

• Administer and optimize security monitoring and response platforms.
• Configure and maintain security detections, alerts, dashboards, and workflows.
• Evaluate new technologies and security capabilities.
• Support cloud security initiatives and security architecture reviews.
• Troubleshoot complex issues involving security tools and integrations.

Vulnerability Management & Security Controls

• Conduct vulnerability assessments and support remediation efforts.
• Validate security controls and response capabilities.
• Collaborate with Technology teams to prioritize and address risk.
• Identify gaps in security coverage and recommend improvements.

Collaboration & Continuous Improvement

• Partner with Business Technology, Infrastructure, Compliance, and Engineering teams.
• Contribute to security standards, procedures, and best practices.
• Participate in security awareness and training initiatives.
• Stay current on emerging threats, technologies, and industry trends.
• (Senior Level) Mentor and coach Security Operations team members.

Current Strategic Initiatives

• Security Operations Modernization
• Security Automation & Orchestration Expansion
• AI-Augmented Security Operations
• Identity Governance & Administration (ConductorOne)
• Automated Provisioning & Deprovisioning
• Access Certification & Governance Programs
• Threat Hunting Program Enhancement
• Cloud Security Maturity Initiatives
• Vulnerability Management Optimization
• Detection Engineering Improvements

Tools & Technologies

• Microsoft Defender
• Microsoft Security Copilot
• Microsoft Entra ID
• Azure DevOps
• Hunters Security
• Cribl
• Tenable
• Netskope
• Tines
• Microsoft Power Automate
• Python
• Microsoft 365
• Microsoft 365 Copilot
• Claude AI
• SIEM Platforms
• EDR/XDR Technologies
• Cloud Security Platforms

What You Bring

Security Operations Engineer Minimum Qualifications

• Associate degree in Information Security, Computer Science, Engineering, or related field (or equivalent experience).
• 3 years of Security Operations, SOC, Incident Response, or Security Engineering experience.
• Experience with security monitoring, threat detection, and incident response.
• Familiarity with SIEM, IDS/IPS, EDR/XDR, firewall, and cloud security technologies.
• Experience with vulnerability management processes.
• Knowledge of security frameworks such as NIST, ISO 27001, or CIS Controls.
• Familiarity with Python, PowerShell, Bash, or similar scripting languages.
• Understanding of cloud security principles.
• Experience with AI-powered security tools, copilots, automation platforms, or agentic workflows.
• Strong analytical, troubleshooting, and communication skills.

Sr. Security Operations Engineer Minimum Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering, or related field (or equivalent experience).
• 5 years of Security Operations, Incident Response, Threat Detection, or Security Engineering experience.
• Demonstrated experience leading complex incident investigations.
• Experience conducting advanced threat hunting activities.
• Experience managing vulnerability remediation programs.Advanced experience with SIEM platforms, detection engineering, and security analytics.
• Strong cloud security knowledge across Azure, AWS, or GCP environments.
• Proficiency with security automation and scripting technologies.
• Experience mentoring engineers or providing technical leadership.
• Strong understanding of NIST, CIS, ISO 27001, or related frameworks.

Preferred Qualifications

• Professional cybersecurity certifications such as:
• CISSP, GCIH, GCIA, GCFA, CEH, Security ,OSCP
• Experience working in a Security Operations Center (SOC).
• Experience with MITRE ATT&CK.
• Experience with security automation and orchestration platforms.
• Experience with AI-assisted security operations.
• Experience supporting regulated or financial-services environments.
• Experience with Identity Governance and Administration platforms.

Scope & Impact

• Protect critical business systems and sensitive organizational data.
• Improve WoodmenLife's ability to detect and respond to cybersecurity threats.
• Drive automation initiatives that improve operational efficiency.
• Help modernize identity governance and access management capabilities.
• Influence security tool optimization and operational strategy.
• Support enterprise-wide risk reduction and security maturity efforts.
• Provide technical leadership and mentorship at the Senior Engineer level.

Career Growth

This role provides opportunities to advance into:

Security Operations Career Path

• Security Operations Engineer
• Sr. Security Operations Engineer
• Lead Security Operations Engineer

Security Engineering Career Path

• Security Product Engineer
• Sr. Security Product Engineer
• Lead Security Product Engineer

Specialized Security Career Path

• Security Automation Engineer

This position offers exposure to enterprise cybersecurity operations, AI-enabled security technologies, cloud security initiatives, automation engineering, identity governance, and strategic security transformation projects.

Leadership Insight from the Hiring

Manager

"My leadership style is collaborative, servant-oriented, and focused on accountability. I believe in empowering team members with clear expectations, the resources they need to succeed, and the autonomy to take ownership of their work. I foster an environment of continuous learning, open communication, and professional development while providing coaching and support when needed."

WoodmenLife offers a competitive compensation package and a comprehensive benefits package. More information about our benefits can be found at:

https://www.woodmenlife.org/careers/home-office/benefits/

As part of WoodmenLife's employment process, candidates will be required to complete a criminal background check, credit check (where required for position), fingerprint check (where required for position), drug screen, and reference checks. Any offer of employment will be contingent upon successfully passing the above.

WoodmenLife is welcoming to all regardless of background and beliefs. We respect every associate's unique perspective and contribution. We are committed to creating an environment that values differences and provides opportunities for growth, leadership, and service.

Woodmen of the World Life Insurance Society (WoodmenLife) is an Equal Opportunity Employer.