Staff Security Engineer - Cloud, Incident Response

GoodLeap; Roseville (CA); Presencial; USD 167.000 - 213.000; Jornada completa

Descripción de la vacante

GoodLeap is seeking a Staff Security Engineer, Security Operations to protect cloud environments, applications, endpoints, and corporate systems. You will design detections, lead incident response, and manage security tooling across AWS, identity, endpoint, and email, while building AI-driven automations to shorten detection and response times.

You will mentor the security team, collaborate with engineering and compliance, and ensure controls are effectively applied in a fast-paced, evolving

Formación

• Deep knowledge of AWS security configurations and tooling.
• Hands-on detection engineering and SIEM query experience.
• Hands-on incident response and cloud forensics.
• Familiar with MITRE ATT&CK and OWASP Top 10.
• Experience with Python automation and AI agent workflows.

Responsabilidades

• Design, build, test, and tune detections across cloud, identity, endpoint, and email telemetry.
• Lead investigation, containment, eradication, and recovery for security incidents.
• Deploy and manage security tooling including EDR and email security.
• Mentor security team and partner engineers on detection and response practices.
• Develop AI agents and automation to reduce time-to-detect and time-to-respond.

Conocimientos

AWS security

Detection engineering

Incident response

MITRE ATT&CK

OWASP Top 10

Python automation

LLM agents

AI security monitoring

Herramientas

CrowdStrike Falcon

CloudTrail

GuardDuty

Security Hub

SIEM

Descripción del empleo

GoodLeap is seeking a Staff Security Engineer, Security Operations to protect cloud environments, applications, endpoints, and corporate systems. You will design detections, lead incident response, and manage security tooling across AWS, identity, endpoint, and email, while building AI-driven automations to shorten detection and response times.

You will mentor the security team, collaborate with engineering and compliance, and ensure controls are effectively applied in a fast-paced, evolving