Senior Security Engineer: Cloud SIEM & IR

Jobgether; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work: Fully remote

Equity

Paid time off: 25+ days

Coworking access

Team events and retreat

High-quality equipment

Home office stipend

Learning budget

Private medical insurance

Location-based perks

Job summary

Jobgether is listing a fully remote Security Engineer III - Security Operations role for the United States. You will own detection and response capabilities, build SIEM detections in Elastic and AWS, automate response workflows with Python, and improve security tooling and runbooks while collaborating with a distributed team.

In this role you will triage alerts, investigate incidents, document findings, and help drive security maturity across compliance frameworks.

Qualifications

• Hands-on experience building, tuning, and maintaining SIEM detections.
• Practical experience securing AWS environments and cloud-native detection.
• Proficiency in Python for scripting and tooling.
• Experience with Terraform or similar IaC technologies.
• Familiarity with MITRE ATT&CK framework and threat detection.
• Strong written communication for investigations and risk decisions.

Responsibilities

• Plan and deliver end-to-end detection and response initiatives.
• Build and maintain detections across Elastic SIEM and AWS.
• Triage alerts, investigate incidents, and drive issues to resolution.
• Document investigations and findings for follow-up actions.
• Develop runbooks and automation with Python and no-code tools.
• Participate in on-call rotation for monitoring and response.
• Support audit-ready security controls for SOC 2 and PCI DSS.

Skills

SIEM detection

Python scripting

Incident response

Threat detection

Cloud security

MITRE ATT&CK

Tools

Elastic SIEM

AWS

Terraform

Python

Job description

Jobgether is listing a fully remote Security Engineer III - Security Operations role for the United States. You will own detection and response capabilities, build SIEM detections in Elastic and AWS, automate response workflows with Python, and improve security tooling and runbooks while collaborating with a distributed team.

In this role you will triage alerts, investigate incidents, document findings, and help drive security maturity across compliance frameworks.