Senior Security Operations Engineer

United States Digital Space LLC; United States; Remote; USD 135,000 - 228,000; Full time

Job summary

the company is seeking a Security Incident Response professional to monitor security events, provide analysis, and lead incidents through closure with cross-team coordination.

The role emphasizes developing runbooks, automation, and process improvements while mentoring junior staff and aligning with company principles for global scaling. Based in US time zones, it offers a flexible, remote model and strong total rewards.

Qualifications

• 5+ years of experience in Security Incident Response.
• Ability to communicate investigative findings to technical staff, executives, and legal.
• Ability to build scripts or tools to support investigation processes, with proficiency in Python.
• Mentor and train security operation engineers on data collection, analysis, and reporting.
• Practical experience leading security incident response across teams.
• Understanding of forensics on macOS, Windows, and Linux.
• Experience using SIEM tools for log reviews.
• Experience in cloud architecture and security (AWS, GCP).
• Role aligned to Pacific Time Zone shift within US/Canada.

Responsibilities

• Monitor security events and provide technical analysis on alerts.
• Lead information security incidents and investigations, developing incident response strategy and coordinating to closure.
• Deliver clear security guidance for incident response and insider threat initiatives.
• Coordinate building of services, capabilities, integrations, and implementations for security operations.
• Embed the company’s principles (Customer Success, Long-Term Build, Growth Mindset, Inclusion, Teamwork) as we scale.

Skills

Security Incident Response

Python scripting

Communication

Mentoring

Incident leadership

Digital forensics

SIEM

Cloud security

Education

Bachelor’s or Master’s in CS/Info Security

Tools

Python

AWS

GCP

Job description

Who we are

the company (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of Things (IoT) data to develop actionable insights and improve their operations. At the company, we are helping improve the safety, efficiency and sustainability of the physical operations that power our global economy. Representing more than 40% of global GDP, these industries are the infrastructure of our planet, including agriculture, construction, field services, transportation, and manufacturing — and we are excited to help digitally transform their operations at scale.

Working at the company means you’ll help define the future of physical operations and be on a team that’s shaping an exciting array of product solutions, including Video-Based Safety, Vehicle Telematics, Apps and Driver Workflows, and Equipment Monitoring. As part of a recently public company, you’ll have the autonomy and support to make an impact as we build for the long term.

About the role:

As a member of our Security Operations Team, you will collaborate with a global team of engineers to monitor and respond to security events, lead security incidents as Incident Commander, and lead digital forensic investigations in support of Employee Relations, Legal, Compliance, or Information Security cases.

Although you will be focused on security incident response, you will also have the opportunity to create and maintain runbooks, and automated workflows, and assist in process refinement and implementation. You will collaborate with a diverse team of analysts, engineers, and key stakeholders on security initiatives across the company. Above all, your focus is bringing Security expertise to the table in a collaborative, humble, and practical manner.

This role is open to candidates residing in the US in the Pacific Time Zone.You should apply if:

• You want to impact the industries that run our world: Your efforts will result in real-world impact – helping to keep the lights on, get food into grocery stores, reduce emissions, and most importantly, ensure workers return home safely.

• You are the architect of your own career: If you put in the work, this role won’t be your last at the company. We set up our employees for success and have built a culture that encourages rapid career development, countless opportunities to experiment and master your craft in a hyper growth environment.

• You’re energized by our opportunity: The vision we have to digitize large sectors of the global economy requires your full focus and best efforts to bring forth creative, ambitious ideas for our customers.

• You want to be with the best: At the company, we win together, celebrate together and support each other. Youwill be surrounded by a high-calibre team that will encourage you to do your best.

In this role, you will:

• Monitor security events and provide technical analysis on alerts

• Lead information security incidents and employee investigations by developing the incident response strategy, lead the execution through incident closure, while providing incident updates to key stakeholders throughout the incident

• Deliver security guidance clearly and concisely for incident response and insider threat initiatives

• Coordinate the building of services, capabilities, integrations, and implementations of technologies to support security operations, incident response, and insider threat

• Champion, role model, and embed the company’s cultural principles (Focus on Customer Success, Build for the Long Term, Adopt a Growth Mindset, Be Inclusive, Win as a Team) as we scale globally and across new offices

Minimum requirements for the role:

• 5+ years of experience in Security Incident Response

• Ability to communicate investigative findings and strategies to technical staff, executive leadership, and legal

• Ability to build scripts or tools to support the company’s investigation processes, with proficiency in Python

• Mentor and train security operation engineers on data collection, analysis, and reporting technical analysis

• Practical experience acting as a lead during security incident response, including monitoring and triaging alerts, and coordinating across teams

• Understanding of analysis and forensics techniques on macOS, Windows, and Linux

• Experience utilizing SIEM tools to perform log reviews

• Experience in cloud architecture and security (AWS, GCP) and cloud-based services

• This role will be part of our Pacific Time Zone shift and therefore must reside in the Pacific Time Zone, Mountain Time Zone or Central Time Zone of the United States or Canada

An ideal candidate also has:

• 3+ years of experience working on insider threat initiatives or employee investigations

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field - or relevant industry experience

• GIAC Certified Incident Handler (GCIH) Certification

• Familiarity with common security frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, FedRAMP

The range of annual base salary for full-time employees for this position is below. Please note that base pay offered may vary depending on factors including your city of residence, job-related knowledge, skills, and experience. This role is also eligible for an initial RSU grant with no vesting cliff, and ongoing refresh opportunities tied to performance, subject to plan terms and conditions. Learn more about our total rewards and benefits below.

Annual Base Salary

$135,481—$227,700 USD

Total Rewards

At the company, we build for the people who keep the global economy moving. We want owners, not passengers, which is why our rewards are designed to fuel high-impact builders. Our compensation program delivers above-market total compensation through a combination of base salary, performance-based bonus/variable pay, and equity (for eligible roles) in a high-growth public company. We meaningfully differentiate pay for our top performers, who have the opportunity to earn above-market compensation that can outpace the broader market over time.

Beyond compensation, we provide the foundations that enable long-term success: a flexible, employee-led remote model, a professional development stipend, comprehensive health and parental leave plans, and more. If you’re ready to build for the long term and own the outcome, your journey starts here.

Flexible Working

At the company, we embrace a flexible working model that caters to the diverse needs of our teams. Our offices are open for those who prefer to work in-person and we also support remote work where it aligns with our operational requirements. For certain positions, being close to one of our offices or