Staff Security Engineer — AI-Driven Detection & IR

GoodLeap; Town of Portland (NY); On-site; USD 167,000 - 213,000; Full time

Job summary

GoodLeap is seeking a Staff Security Engineer, Security Operations to protect cloud environments, applications, endpoints, and corporate systems. You will design detections, lead incident response, and manage security tooling across AWS, identity, and email, while building AI agents to speed detection and response.

You will mentor the security team and partner engineering teams, and work with software, IT, and compliance to ensure controls are applied effectively.

Qualifications

• In-depth knowledge of AWS security configurations, logging, and tooling.
• Hands-on detection engineering with SIEM queries and code-based rules.
• Experience in incident response, log analysis, and cloud investigations.
• Familiar with MITRE ATT&CK and OWASP Top 10.
• Strong communication and leadership capabilities.

Responsibilities

• Design, build, test, and tune detections across cloud, identity, endpoint, and email telemetry.
• Lead investigation, containment, eradication, and recovery for security incidents.
• Deploy and manage security tooling including EDR, SIEM, and email security.
• Build AI agents and automation for alert triage, enrichment, and response.
• Mentor security and partner engineering teams and improve operations.

Skills

AWS security

Detection engineering

Incident response

Security monitoring

Mentorship

Communication

Tools

CrowdStrike Falcon

SIEM platforms

WAF/DDoS tooling

Job description

GoodLeap is seeking a Staff Security Engineer, Security Operations to protect cloud environments, applications, endpoints, and corporate systems. You will design detections, lead incident response, and manage security tooling across AWS, identity, and email, while building AI agents to speed detection and response.

You will mentor the security team and partner engineering teams, and work with software, IT, and compliance to ensure controls are applied effectively.