Senior Security Operations Engineer – IR, Detection & Automation

Socket.dev; New York (NY); Hybrid; USD 200,000 - 250,000; Full time

Benefits offered by this job

Accelerated growth

Top-tier compensation

Flexible time off

Comprehensive benefits

Job summary

StubHub is building a world-class Security Operations team to protect our global live-event platform. As a Senior Security Operations Engineer, you’ll lead incident response, design detection pipelines, and write production-grade code to automate security workflows.

You’ll work with Cloud and Infrastructure Security, Identity Engineering, and cross-functional partners in a hybrid New York or Century City setting, shaping detection and response at scale.

Qualifications

• 5+ years of security engineering, security operations, or related field.
• Hands-on incident response leadership in complex, multi-system investigations.
• Strong threat detection engineering: writing rules, tuning alerts, reducing false positives.

Responsibilities

• Lead end-to-end security incident response: detection, triage, containment, eradication, recovery, post-incident review.
• Design, build, and tune detection rules and analytics across cloud, endpoint, network, and apps.
• Improve SIEM/log management: data ingestion, normalization, enrichment, and alerting workflows.
• Write internal software to automate detection, response, and reporting workflows (Python/Go).
• Support third-party security program: evaluate vendor security posture and triage risk findings.

Skills

Incident response

Threat detection engineering

Python/Go programming

SIEM familiarity

Cloud environments

MITRE ATT&CK mapping

Communication skills

Tools

Splunk

ELK

Chronicle

Panther

Job description

StubHub is building a world-class Security Operations team to protect our global live-event platform. As a Senior Security Operations Engineer, you’ll lead incident response, design detection pipelines, and write production-grade code to automate security workflows.

You’ll work with Cloud and Infrastructure Security, Identity Engineering, and cross-functional partners in a hybrid New York or Century City setting, shaping detection and response at scale.