Senior Security Ops Engineer: Detection & IR Automation

StubHub; United States; Hybrid; USD 200,000 - 250,000; Full time

Benefits offered by this job

Growth environment

Compensation

Flexible time off

Benefits package

Job summary

StubHub is seeking a Senior Security Operations Engineer to architect detection pipelines, automate responses, and mature a SOC-less approach to Detection & Response. You will lead incident response across cloud, endpoint, network, and apps, while building scalable detection and automation capabilities.

You will work with cross-functional teams to extend tooling and validate coverage against MITRE ATT&CK, with a focus on scalable, production-grade security solutions in a hybrid in-office setup

Qualifications

• 5+ years in security engineering or operations
• Hands-on incident response leadership and investigations
• Proficient in at least one programming language (Python preferred) and scripting

Responsibilities

• Lead security incident response end-to-end: detect, triage, contain, eradicate, recover, review
• Design, tune, and maintain detection rules and log pipelines
• Develop parsers, ETL and data transformations for high-quality SIEM signals
• Write internal software to automate detection, response and reporting workflows
• Collaborate with teams to map detections to MITRE ATT&CK and improve coverage
• Build dashboards and metrics to show security health to leadership
• Advance third-party security and vendor risk programs

Skills

Incident response

Threat detection

SIEM engineering

Security automation

Cloud security

Python

Tools

Splunk

ELK

Chronicle

Panther

SOAR

Job description

StubHub is seeking a Senior Security Operations Engineer to architect detection pipelines, automate responses, and mature a SOC-less approach to Detection & Response. You will lead incident response across cloud, endpoint, network, and apps, while building scalable detection and automation capabilities.

You will work with cross-functional teams to extend tooling and validate coverage against MITRE ATT&CK, with a focus on scalable, production-grade security solutions in a hybrid in-office setup