Staff Security Engineer - AI-Driven SOC & Incident Response

GoodLeap; West Palm Beach (FL); On-site; USD 167,000 - 213,000; Full time

Job summary

GoodLeap is seeking a Staff Security Engineer, Security Operations to protect cloud environments, applications, endpoints, and corporate systems. You will design detections, lead incident response, and manage security tooling across AWS, identity, and email.

You will build AI agents, mentor teams, and work with engineering, IT, and compliance to apply robust controls. The role emphasizes proactive security operations, threat intelligence, and incident readiness in a fast-paced tech environment.

Qualifications

• Extensive experience with AWS security configurations and tooling.
• Hands-on detection engineering and SIEM query experience.
• Incident response including log analysis and cloud investigations.
• Familiar with MITRE ATT&CK and OWASP Top 10.
• Experience with EDR platforms (CrowdStrike Falcon).
• Experience building automation in Python and AI agent workflows.
• Experience in SOC 2, PCI-DSS, or ISO controls environments.
• Strong communication and cross-functional collaboration.

Responsibilities

• Design and tune detections across cloud, identity, endpoint, and email telemetry.
• Lead investigation, containment, eradication, and recovery for security incidents.
• Deploy and manage security tooling including cloud monitoring, WAF, IDS, EDR (CrowdStrike).
• Build AI agents and automation for alert triage, enrichment, investigation, and response.
• Mentor the security team and partner engineers to mature security operations.

Skills

AWS security

Detection engineering

Incident response

Security tooling

Python automation

AI agents

EDR (CrowdStrike)

Email security

MITRE ATT&CK

OWASP Top 10

Tools

CrowdStrike Falcon

AWS CloudTrail

AWS GuardDuty

AWS Security Hub

SIEM

Job description

GoodLeap is seeking a Staff Security Engineer, Security Operations to protect cloud environments, applications, endpoints, and corporate systems. You will design detections, lead incident response, and manage security tooling across AWS, identity, and email.

You will build AI agents, mentor teams, and work with engineering, IT, and compliance to apply robust controls. The role emphasizes proactive security operations, threat intelligence, and incident readiness in a fast-paced tech environment.