Senior Security Operations Engineer — Remote, AI‑Driven SOC

Sword Health; United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Equity shares

Remote-friendly environment

401(k)

Paid time off

Job summary

Sword Health is seeking a Senior Security Engineer (Security Operations) to safeguard our cloud infrastructure and applications. You will design and continually improve detection, alerting and incident response capabilities to support rapid, reliable care for users and enterprises.

You will collaborate with security, IT, and engineering teams, applying AI-driven automation to triage, enrich, and classify incidents, while aligning with industry standards.

Qualifications

• Public Trust Clearance required or ability to obtain
• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent
• Strong experience with cloud environments (AWS/GCP/Azure) and cloud-native threats
• Proficiency in scripting languages (Python, Bash) for automation
• Hands-on with SOC tools: SIEM, SOAR, EDR/XDR, log management
• Knowledge of incident containment and eradication strategies
• Familiarity with NIST, CIS, MITRE ATT&CK, ISO 27001
• Excellent analytical and problem-solving skills
• Ability to communicate security risks to technical and non-technical audiences
• Experience leading cross-functional security initiatives

Responsibilities

• Design and improve detection and alerting controls for high fidelity and rapid response
• Build, test, and automate incident response playbooks and runbooks
• Drive data-driven prioritization of alerts aligned with business impact
• Lead investigations including root-cause analysis and digital forensics
• Engage in threat intelligence and threat hunting to enrich controls
• Own incident handling from detection to resolution with cross-team collaboration
• Define and maintain operational metrics for incident response
• Leverage AI to automate and optimize security operations workflows

Skills

Public Trust Clearance

Bachelor's degree

Cloud environments

Python scripting

SIEM SOAR EDR XDR

Incident containment

Security frameworks

Threat hunting

AI in security

Education

Bachelor's degree in CS/Cybersecurity

Tools

SIEM (Splunk/Sentinel)

SOAR

EDR/XDR

Log management

Job description

Sword Health is seeking a Senior Security Engineer (Security Operations) to safeguard our cloud infrastructure and applications. You will design and continually improve detection, alerting and incident response capabilities to support rapid, reliable care for users and enterprises.

You will collaborate with security, IT, and engineering teams, applying AI-driven automation to triage, enrich, and classify incidents, while aligning with industry standards.