Senior Security Engineer - Remote Cloud Detections & Automation

Primer.io; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Primer is seeking a Security Engineer to detect, investigate, and respond to threats across our cloud infrastructure. You will own a meaningful slice of detection and response capability, tuning Elastic SIEM rules, building automation in Python, and contributing to runbooks and on-call incident response.

You will work with AWS, Terraform, and no-code automation tools (Zapier/Tines) to close coverage gaps, write up findings, and support audits (SOC 2, PCI DSS).

Qualifications

• Hands-on experience building and tuning detections in a SIEM (Elastic preferred).
• Experience with AWS and cloud-native detection and response.
• Comfortable with Python scripting/automation; familiarity with IaC (Terraform).
• Knowledge of MITRE ATT&CK and incident triage/resolution.

Responsibilities

• Plan and deliver end-to-end detection and response work within ownership area.
• Build, tune and maintain detections across SIEM and AWS environments.
• Own investigation queue: triage, investigate, elevate and resolve security incidents.
• Build runbooks and automations (Python, Zapier, Tines) to reduce manual triage work.
• Support audits by contributing evidence and maintaining controls for compliance.

Skills

SIEM tuning

Elastic SIEM

AWS cloud

Python scripting

Terraform

MITRE ATT&CK

Incident response

Written communication

Tools

Elastic SIEM

AWS

Zapier

Tines

Terraform

Job description

Primer is seeking a Security Engineer to detect, investigate, and respond to threats across our cloud infrastructure. You will own a meaningful slice of detection and response capability, tuning Elastic SIEM rules, building automation in Python, and contributing to runbooks and on-call incident response.

You will work with AWS, Terraform, and no-code automation tools (Zapier/Tines) to close coverage gaps, write up findings, and support audits (SOC 2, PCI DSS).