Senior Security Operations Engineer

Paxos; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Paxos is seeking a Senior Security Operations Engineer to defend our endpoints, cloud, and network. You will triage, investigate, and contain incidents, while automating workflows and building detections to scale our security program.

You’ll lead investigations across multiple environments, tune SIEM/EDR setups, and apply threat intelligence to ongoing monitoring. Collaboration in on-call rotations and post‑incident reviews will be part of daily duties.

Qualifications

• 5+ years in security operations or related security engineering.
• Led investigations across endpoints, cloud environments, and network telemetry.
• Advanced hands-on experience with SIEM and EDR platforms.
• Ability to automate repetitive security workflows and apply AI to improve speed.
• Experience mentoring teammates and driving improvements in security ops.

Responsibilities

• Triage, investigate, and respond to security alerts across endpoints, cloud, and network telemetry.
• Automate repetitive workflows and use AI to increase speed and scale.
• Execute containment and remediation for incidents, following runbooks.
• Tune SIEM and EDR detections to reduce false positives and close gaps.
• Apply threat intelligence (IOCs, TTPs) to investigations and monitoring.
• Participate in on-call rotations and document post-incident reviews.

Skills

Security operations

Incident response

Investigation leadership

SIEM/EDR tuning

Automation / AI in security

Threat intelligence

On-call readiness

Mentoring teammates

Tools

SIEM

EDR

Job description

About Paxos

Today’s financial infrastructure is archaic, expensive, inefficient and risky — supporting a system that leaves out more people than it lets in. So we’re rebuilding it.

We’re on a mission to open the world’s financial system to everyone by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, we’ve built blockchain infrastructure that tokenizes, custodies, trades and settles assets for the world’s leading financial institutions, like Mastercard, Visa, Robinhood, and PayPal.

The Opportunity

As a Senior Security Operations Engineer, you will serve on the front lines of our security program, helping protect the organization by detecting, investigating, and containing threats across our endpoints, cloud infrastructure, and network. You will act as both an investigator and a builder: triaging and resolving security incidents with precision while continuously improving detections and automations that help the team move faster and operate more effectively. This role is central to our day‑to‑day security posture, turning alerts into meaningful action.

What You’ll Do

• Triage, investigate, and respond to security alerts across endpoints, cloud infrastructure, and network telemetry.
• Take a builder’s mindset to the role by automating repetitive workflows and using AI to increase speed, scale, and effectiveness.
• Execute containment and remediation actions for confirmed incidents, while following and continuously improving established runbooks.
• Tune and maintain SIEM and EDR detections to reduce false positives, strengthen signal quality, and close coverage gaps.
• Apply threat intelligence, including IOCs and TTPs, to active investigations and ongoing monitoring.
• Participate in the on‑call rotation and contribute clear, actionable post‑incident documentation.

About You

• You bring 5+ years of experience in security operations, detection and response, or a related security engineering role.
• You have deep experience leading investigations and response efforts across endpoints, cloud environments, and network telemetry, and can independently manage complex security incidents from initial triage through containment, eradication, and recovery.
• You bring strong analytical judgment, mature decision-making, and a calm, methodical approach to high‑severity alerts and incidents, including the ability to prioritize effectively and guide others through ambiguity.
• You have advanced hands‑on experience with SIEM and EDR platforms, including building and tuning detections, improving signal quality, reducing false positives, and shaping detection strategy based on evolving threats.
• You think like a builder and continuously identify opportunities to automate repetitive security workflows, including applying AI thoughtfully to improve the speed, consistency, and scale of investigations and response.
• You are skilled at applying threat intelligence, including IOCs, TTPs, and adversary tradecraft, to investigations, proactive threat hunting, and the continuous improvement of monitoring and detection capabilities.
• You are comfortable participating in an on‑call rotation, and you document incidents clearly and thoroughly while driving post‑incident reviews, operational improvements, and stronger team readiness over time.
• You have experience mentoring teammates, raising the quality of investigative work, and influencing security operations processes, tooling, and standards across the team.