Senior Security Engineer - Blue Team

Remote; San Francisco (CA); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive base salary

Equity package

Unlimited PTO & sick days

Job summary

Loadsmart is seeking a Senior Security Engineer to lead incident response and strengthen our defensive security program. As the second engineer on the Blue Team, you will collaborate with engineering squads to detect threats early and keep our applications secure and compliant.

You will implement incident response playbooks, build SIEM detections in Datadog Cloud SIEM, secure AWS and Kubernetes, and mentor engineers across teams while communicating security posture to leadership.

Qualifications

• 5+ years of experience in Blue team / Defensive security / Security operations.
• Hands-on experience leading security incident response, from detection through post-incident review and follow-up of actions.
• Experience with forensics and evidence handling in cloud environments: log analysis, evidence collection and preservation.
• Experience building and tuning SIEM detections and alerts, such as in Datadog Cloud SIEM, mapped to MITRE ATT&CK, CIS or NIST.
• Experience securing AWS and Kubernetes, including AWS IAM and SSO permission reviews and remediation.
• Automating security tasks with Python and/or Bash, and managing infrastructure as code with Terraform.
• Experience defining security processes, leading cross-team initiatives and mentoring engineers, with fluent English for daily work with native speakers.

Responsibilities

• Lead security incidents end-to-end: triage, containment, eradication, recovery, stakeholder communication and post-incident review.
• Own and evolve our incident response process: playbooks, severity model, on-call practices and tabletop exercises with engineering and IT.
• Build and tune detections in Datadog Cloud SIEM across AWS, Kubernetes and Google Workspace to reduce time to detect and alert noise.
• Investigate suspicious activity across cloud, identity and workload logs, collecting and preserving evidence for follow-up.
• Improve our cloud security posture, including IAM, and turn findings into prioritized, tracked work for engineering squads.
• Automate detection and response tasks with Python and Terraform.
• Report on incidents and security posture to engineering leadership, and mentor engineers across squads.

Skills

Blue team experience

Incident response leadership

Cloud forensics

Security operations

Mentoring engineers

Tools

Datadog Cloud SIEM

Terraform

Python

Bash

AWS

Kubernetes

Job description

In this role, you will lead our response to security incidents and help strengthen our defensive security program. We are seeking an experienced, goal-driven Senior Security Engineer who thrives in a dynamic and fast-paced global company. As the second engineer on our Blue Team, you will partner with our current Blue Team engineer and with engineering squads across product and platform engineering to detect threats early, respond fast, and keep our applications and infrastructure safe and compliant.

DEPARTMENT: Engineering

LOCATION: Remote anywhere in Brazil

WHAT YOU GET TO DO:

• Lead security incidents end-to-end: triage, containment, eradication, recovery, stakeholder communication and post-incident review.

• Own and evolve our incident response process: playbooks, severity model, on-call practices and tabletop exercises with engineering and IT.

• Build and tune detections in Datadog Cloud SIEM across AWS, Kubernetes and Google Workspace to reduce time to detect and alert noise.

• Investigate suspicious activity across cloud, identity and workload logs, collecting and preserving evidence for follow-up.

• Improve our cloud security posture, including IAM, and turn findings into prioritized, tracked work for engineering squads.

• Automate detection and response tasks with Python and Terraform.

• Report on incidents and security posture to engineering leadership, and mentor engineers across squads.

REQUIRED QUALIFICATIONS:

• 5+ years of experience in Blue team / Defensive security / Security operations.

• Hands-on experience leading security incident response, from detection through post-incident review and follow-up of actions.

• Experience with forensics and evidence handling in cloud environments: log analysis, evidence collection and preservation.

• Experience building and tuning SIEM detections and alerts, such as in Datadog Cloud SIEM, mapped to MITRE ATT&CK, CIS or NIST.

• Experience securing AWS and Kubernetes, including AWS IAM and SSO permission reviews and remediation.

• Automating security tasks with Python and/or Bash, and managing infrastructure as code with Terraform.

• Experience defining security processes, leading cross-team initiatives and mentoring engineers, with fluent English for daily work with native speakers.

WORKING AT LOADSMART:

• Competitive base salaries - we believe in rewarding top talent

• Extremely competitive Equity package - become a shareholder in our company!

• Loadie Time Off - PTO and sick days without a limit

At Loadsmart, we believe our biggest asset is our people. We are proud to be an equal opportunity employer, hiring and developing individuals from diverse backgrounds and experiences to add to our collaborative culture. Loadsmart treats all candidates and employees with respect and does not discriminate in our recruiting, hiring, and promoting processes, including on the basis of race, color, religion, sex, age, sexual orientation, gender identity and/or expression, national origin, veteran status, or disability.It is the policy of Loadsmart that all offers of employment made shall be contingent upon successful completion of electronic background check(s). These checks will be job-related, consistent with business necessity and conducted by our vendor, pursuant to all applicable laws, rules, policies and procedures of our candidates' specific locale.