Senior Security Operations Engineer

Brex; San Francisco (CA); Hybrid; USD 192,000 - 240,000; Full time

Job summary

Join a forward-thinking company as a Senior Security Operations Engineer, where you will tackle security challenges in a dynamic environment. Collaborate with diverse teams to enhance security configurations, respond to incidents, and develop innovative tools. This role offers the chance to contribute to open-source projects and engage with the wider security community. With a commitment to mentorship and engineering excellence, you'll thrive in an inclusive culture that values your potential. Embrace the opportunity to work in a vibrant San Francisco office while enjoying flexibility in your work schedule.

Qualifications

• Experience in security alert triage and incident response.
• Strong coding experience in Go and Python is required.
• Familiarity with CI/CD systems and DevOps workflows.

Responsibilities

• Prevent, detect, and respond to security threats across environments.
• Perform security incident response and participate in threat hunting.
• Collaborate with engineering and operations teams to drive security.

Skills

Security Incident Response

Detection Engineering

Collaboration

Attention to Detail

Coding (Go, Python)

Education

Bachelor’s degree in Computer Science

Equivalent training or fellowship

5+ years work experience

Tools

SIEMs

Monitoring Tools

CI/CD Systems

Terraform

AWS

Kubernetes

Job description

Brex is the AI-powered spend platform. We help companies spend with confidence with integrated corporate cards, banking, and global payments, plus intuitive software for travel and expenses. Tens of thousands of companies from startups to enterprises — including DoorDash, Flexport, and Compass — use Brex to proactively control spend, reduce costs, and increase efficiency on a global scale.

Working at Brex allows you to push your limits, challenge the status quo, and collaborate with some of the brightest minds in the industry. We’re committed to building a diverse team and inclusive culture and believe your potential should only be limited by how big you can dream. We make this a reality by empowering you with the tools, resources, and support you need to grow your career.

Engineering at Brex

The Engineering team includes Data, IT, Security, and Software, and is responsible for building innovative products and infrastructure for both internal and external users. We have multiple autonomous and collaborative teams who are eager to learn, teach, and constantly improve how things work. Together, we strive to build robust and scalable systems that enable Brex to grow rapidly and help our customers reach their full potential.

What you’ll do

As a Senior Security Operations Engineer at Brex, you will focus on preventing, detecting and responding to security threats across Brex's corporate and cloud environments. Our team is responsible for functions across corporate security, detection & response, and infrastructure security domains; and we perform systems engineering and automation to support those functions.

In this role, you will own and operate detection engineering systems and develop tools to improve our security capabilities. As a Senior Security Engineer you will be expected to build and maintain our team’s open source project Substation and have the opportunity to contribute to the Brex Tech Blog . You’ll be part of a team that actively contributes to the wider security community and has a strong commitment to mentorship and engineering excellence.

Security Operations collaborates often with other teams in Trust, IT and Engineering which means you will have the opportunity to work closely with teams like Application Security, Corporate Engineering, GRC and IT to proactively improve security configurations, drive positive employee behavior and generally work to prevent events from becoming incidents.

We’re looking for individuals with a strong background and interest in detecting, responding to, and resolving security incidents and security challenges. You should be comfortable dealing with lots of moving pieces, changing priorities, and new technologies, while having a keen eye for detail. Most importantly, you should be enthusiastic about working with a variety of backgrounds, roles, and people across Brex. Building a world-class financial service requires world-class security.

Where you’ll work

This role will be based in our San Francisco office. You must be willing to work in the office at least 2 days per week on Wednesday and Thursday. Employees will be able to work remotely for up to 4 weeks per year.

Responsibilities

• Work on a highly cross-functional team to prevent, detect and respond to security threats across Brex's corporate and cloud environments
• Perform security incident response, investigation, remediation, and documentation, participate in periodic threat hunting and security exercises
• Leading, scoping and building features, participate in designing, and maintaining tools and systems which support the team’s domains – corporate security, detection & response and infrastructure securityCollaborating and partnering with engineering and operations teams to drive remediation of security issues, while balancing prioritization of those security issues within SLA and teams’ respective backlogs
• Caring about secure system design, valuing building things correctly, an understanding of an iterative MVP approach and an empathetic mindset when working with others

Requirements

• Bachelor’s degree in Computer Science, Engineering or related field OR equivalent training / fellowship OR 5+ years work experienceExperience working in a detection & response or detection engineering role with responsibilities for security alert triage, security incident response, and system ownership of detection engineering systems (e.g. SIEMs, data pipelines, monitoring tools)
• Familiarity with CI/CD systems and DevOps workflows (e.g. Buildkite, Flux, Git, Terraform) in cloud environments (e.g. AWS, Azure, GCP)
• While not primarily a development role, the team develops and maintains tools written in Go and Python, so strong coding experience is requiredYou thrive in a collaborative environment filled with a diverse group of people with different expertise and backgrounds. We currently have around 30 nationalities represented with more than ½ the company working in a country different from the one they grew up in.
• Experience with deploying and maintaining corpsec and infrasec security services and tools owned by the team (e.g. domain monitoring, endpoint tooling, email protection tooling, cloud security tools)
• Experience with securing distributed systems in AWS, cloud and Kubernetes environments
• Contributions to the wider technical community (open source, public research, mentorship, community organizing, blogging, presentations, etc)

Compensation

The expected salary range for this role is $192,000 - $240,000. However, the starting base pay will depend on a number of factors including the candidate’s location, skills, experience, market demands, and internal pay parity. Depending on the position offered, equity and other forms of compensation may be provided as part of a total compensation package.

Please be aware, job-seekers may be at risk of targeting by malicious actors looking for personal data. Brex recruiters will only reach out via LinkedIn or email with abrex.com domain. Any outreach claiming to be from Brex via other sources should be ignored.