Senior Security Engineer, Detection & Response (Remote)

OpenKrill; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Fully remote

Competitive stock options

Flexible holiday, with 25 days minimum

Co-working space access

Workations & Company Retreat

The best equipment for your role

£500 towards your home office setup

Generous learning budget

Private Medical Insurance

Job summary

Primer is seeking a Security Engineer to help detect, investigate, and respond to threats across our cloud infrastructure. You will own a meaningful slice of detection and response, tuning what our SIEM catches and building automation to speed up responses.

You’ll work with Elastic SIEM and AWS, using Python and IaC (Terraform) to deploy durable protections, while contributing to audits and compliance programs. This role includes on-call responsibilities and cross-team collaboration.

Qualifications

• Hands-on experience building and tuning detections in a SIEM (Elastic preferred).
• Experience with AWS and cloud-native detection and response.
• Proficiency in Python for scripting and automation.
• Experience with Terraform or other infrastructure-as-code.
• Working knowledge of MITRE ATT&CK.
• Real experience triaging, investigating and resolving security incidents.
• Clear, structured written communication.

Responsibilities

• Plan and deliver detection and response work end-to-end within your area of ownership.
• Build, tune and maintain detections across our SIEM and AWS environment.
• Own an investigation queue: triage, investigate, elevate and resolve security incidents, and write findings clearly.
• Build runbooks and automations (Python, Zapier, or Tines) to reduce manual triage and response.
• Support our compliance programme by keeping controls audit-ready and contributing evidence for audits (SOC 2, PCI DSS).
• Use Terraform and Python to build and maintain the infrastructure behind your detections and tooling.
• Join our on-call rotation for incident response and monitoring.

Skills

SIEM detections

AWS

Python

Terraform

MITRE ATT&CK

Incident triage

Written communication

Tools

Elastic SIEM

Terraform

Job description

Primer is seeking a Security Engineer to help detect, investigate, and respond to threats across our cloud infrastructure. You will own a meaningful slice of detection and response, tuning what our SIEM catches and building automation to speed up responses.

You’ll work with Elastic SIEM and AWS, using Python and IaC (Terraform) to deploy durable protections, while contributing to audits and compliance programs. This role includes on-call responsibilities and cross-team collaboration.