Staff Security Engineer: AI-Driven Security Ops

GoodLeap; San Francisco (CA); On-site; USD 184,000 - 213,000; Full time

Benefits offered by this job

Bonus potential

Equity offered

Job summary

GoodLeap is seeking a Staff Security Engineer to protect cloud environments, applications, endpoints, and corporate systems. You’ll lead detection engineering, incident response, and security operations while building AI-enabled automation and monitoring across AWS, identity, and email security.

You will mentor teams, design security controls, and help mature GoodLeap’s security operations to reduce risk. Strong experience in AWS security and IAM practices is essential.

Qualifications

• In-depth AWS security knowledge including logging and tooling.
• Hands-on detection engineering and SIEM query experience.
• Experience with incident response, log analysis, and cloud investigations.
• Familiarity with MITRE ATT&CK and OWASP Top 10.

Responsibilities

• Design, build, test, and tune detections across cloud, identity, endpoint, and email telemetry.
• Lead incident investigation, containment, eradication, and recovery for security events.
• Deploy and manage security tooling (cloud monitoring, WAF, DDoS protection, IDS, EDR, email security).
• Build AI agents and automation for alert triage, investigation, and response.
• Mentor security team and partner engineering teams on detection and response practices.

Skills

AWS security

Detection engineering

Incident response

Threat intelligence

Automation with Python

LLM-based agents

Security operations tooling

Communication

Compliance familiarity

Tools

CrowdStrike Falcon

CloudTrail

GuardDuty

Security Hub

SIEM

WAF

EDR

Job description

GoodLeap is seeking a Staff Security Engineer to protect cloud environments, applications, endpoints, and corporate systems. You’ll lead detection engineering, incident response, and security operations while building AI-enabled automation and monitoring across AWS, identity, and email security.

You will mentor teams, design security controls, and help mature GoodLeap’s security operations to reduce risk. Strong experience in AWS security and IAM practices is essential.