Sr. Security Operations Engineer

Behavioral Health Tech, Inc.; Los Angeles (CA); Remote; USD 120,000 - 160,000; Full time

Job summary

A leading company in mental health tech seeks a Sr. Security Operations Engineer to enhance their SOC capabilities. This role involves protecting platform and patient data, collaborating across teams, and developing security strategies. With a commitment to diversity and well-being, the organization offers a supportive work environment and comprehensive benefits.

Benefits

100% remote work environment

Comprehensive health benefits

401(k) plan access

Generous time-off policies

Paid parental leave

Employee Assistance Program (EAP)

New hire home office stipend

Quarterly department stipend

Community and employee resource groups

Qualifications

• 4+ years as Security Analyst, Incident Responder, or similar role.
• Hands-on experience in cloud environments (AWS preferred).
• Proficient in scripting, particularly Python.

Responsibilities

• Build and scale Detection and Response capabilities.
• Monitor alerts and investigate threats.
• Refine security tooling and create actionable runbooks.

Skills

Monitoring cloud environments

Scripting for automation or data analysis

Creating detection rules in SIEM

Education

Relevant security certifications

Tools

SIEM platforms

EDR tools

SQL

Job description

We believe that mental health is just as important as physical health. We recognize that mental health issues can be complex and multifaceted, and we are dedicated to treating the whole person, not just the symptoms.

We aim to create a world where mental health is no longer stigmatized or marginalized, but rather is embraced as an integral part of one's overall well-being.

We believe that by providing quality care that is both evidence-based and compassionate, we can empower individuals to take charge of their mental health and achieve their full potential. We are passionate about making a positive impact on the lives of those struggling with mental health issues and we strive to be a force for positive change in the field of mental healthcare.

About the Role

We’re looking for a Sr. Security Operations Engineer to help build and scale Rula’s Detection and Response capabilities—laying the foundation for our future Security Operations Center (SOC). In this role, you'll be at the front line of protecting our platform and patient data, monitoring alerts, investigating threats, and partnering across engineering teams to improve response times and automate key processes.

You’ll work closely with our Staff DART Engineer, external MDR providers, and stakeholders across the organization to refine security tooling, create actionable runbooks, and evolve our approach to detection and response. The Security team at Rula is highly collaborative, pragmatic, and mission-driven—we’re here to protect the systems that enable mental health care at scale. If you thrive in hands-on roles, enjoy building from the ground up, and want your work to make a real impact, we’d love to hear from you.

Required Qualifications

• 4+ years of experience as a Security Analyst, Incident Responder, Threat Hunter, or similar security operations role on a dedicated security team

• Demonstrated experience monitoring cloud environments (AWS strongly preferred) and responding to incidents

• Hands-on experience creating, tuning, and implementing detection rules in SIEM platforms

• Proficiency with scripting for automation or data analysis, ideally in Python

• Experience developing and maintaining technical documentation, including SOC processes, runbooks, or incident reports

Preferred Qualifications

While having the preferred qualifications enhances your candidacy, having all of them is not mandatory. We encourage all interested applicants to apply, even those who may not meet every preferred requirement.

• Familiarity with threat hunting methodologies and frameworks, such as MITRE ATT&CK

• Experience with Endpoint Detection and Response (EDR) tools, particularly in macOS environments

• Relevant security certifications such as OSCP, GIAC (GCIH, GCIA, GSOC), BTL1, or AWS Security – Specialty

• Experience with no-code/low-code automation platforms or SOAR tools

• Experience querying security data using SQL (e.g., Athena/Trino), and familiarity with schemas like OCSF

We're serious about your well-being! As part of our team, full-time employees receive:

• 100% remote work environment (US-based only): Working hours to support a healthy work-life balance, ensuring you can meet both professional and personal commitments

• Attractive pay and benefits: Full transparency of pay ranges regardless of where you live in the United States

• Comprehensive health benefits: Medical, dental, vision, life, disability, and FSA/HSA

• 401(k) plan access: Start saving for your future

• Generous time-off policies: Including 2 company-wide shutdown weeks each year for self-care (for most employees)

• Paid parental leave: Available for all parents, including birthing, non-birthing, adopting, and fostering

• Employee Assistance Program (EAP): Support for your mental and physical health

• New hire home office stipend: Set up your workspace for success

• Quarterly department stipend: Fund team-building activities or in-person gatherings

• Wellness events and lunch & learns: Explore a variety of engaging topics

• Community and employee resource groups: Participate in groups that celebrate employee identity and lived experiences, fostering a sense of community and belonging for all

Our team

We believe that diversity, equity, and inclusion are fundamental to our mission of making mental healthcare work for everyone. We are dedicated to having a culture of inclusion that will support our employees in feeling safe, seen, heard, and valued.