Staff Security Engineer - SecOps & Threat

6sense; Romania (PA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health coverage

Paid parental leave

Generous paid time-off and holidays

Stock options

Wellness and development programs

Job summary

6sense's Security Operations and Threat Management team is responsible for prevention, detection, investigation, and response to security events and threats. This role executes end-to-end SecOps initiatives, responds to complex incidents, and collaborates across IT, GRC, cloud, and application security teams to validate alerts and perform root-cause analysis.

Preferred candidates bring 5+ years in Security Operations, 3+ years automating security processes, and 2+ years of adversary emulation,

Qualifications

• 5+ years of experience in Security Operations or a similar team.
• 3+ years developing automation.
• 2+ years conducting adversary emulation exercises.
• Experience with security tools and cloud environments (e.g., Vulnerability Scanners, SIEM, SOAR, AWS).
• Experience with industry frameworks, regulations, and standards, such as: MITRE ATT&CK, STRIDE, PASTA, ISO 27001, SOC 2, GDPR, PCI, SOX, NIST, etc.

Responsibilities

• Execute on milestones for end-to-end SecOps & Threat initiatives in accordance with the Security roadmap.
• Identify and respond to complex security incidents, including system compromise, intrusion attempts, and/or DoS attacks via monitoring, vulnerability assessments, and log analysis.
• Engage vendors, Infrastructure, IT, GRC, Cloud, and App Security teams to validate alerts and perform root cause analysis.
• Research emerging threats, vulnerabilities, and attack vectors; push mitigating controls to products and services.
• Perform security forensics.
• Build security tools and automation to enable the team to operate at speed and scale.
• Propose, plan, lead, and execute threat exercises based on current trends and research.
• Mentor engineers to drive security controls and risk remediation.
• Communicate risks and mitigations across audiences with varying sensitivity.
• Execute on quarterly OKRs.

Skills

Security Operations

Automation development

Adversary emulation

Cloud security tools

Education

Bachelor's degree in a related field

CISSP, CISM, GIAC certifications

Tools

Vulnerability Scanners

SIEM

SOAR

AWS

Job description

As a member of 6sense's Security department, the Security Operations and Threat Management team protects 6sense through prevention, detection, investigation, and response to business-impacting security events, incidents, and threats.

Responsibilities & Accountabilities

• Execute on milestones for end-to-end SecOps & Threat initiatives in accordance with the Security roadmap
• Identify and respond to complex security incidents, including system compromise, intrusion attempts, and/or denial of service attacks by conducting continuous monitoring, vulnerability assessments, and log analysis
• Engage vendors, Infrastructure, IT, GRC, Cloud, and Application Security teams as required to validate alerts, ensure incident resolution, and perform root cause analysis
• Research emerging threats, publicly disclosed vulnerabilities or attack vectors, and proactively push mitigating controls to products and services
• Perform security forensics
• Build security tools and advanced automation that enable the 6sense Security Team to operate at speed and scale
• Propose, plan, lead, and execute threat exercises based on current security trends, advisories, publications, and academic research
• Mentor engineers across Information Security to drive security controls and risk remediation
• Communicate risks and mitigations across multiple audiences with varying levels of sensitivity
• Execute on quarterly individual Key Results that support team Objectives (OKRs)

Performance Measurement

• Maintains up-to-date knowledge of 6sense's product, environment, systems, and architecture
• Actively prepares for weekly 1:1s with Manager and monthly skip levels
• Takes part in the Security Operations on-call rotation
• Mitigates security exposures
• Drives incidents to closure within established SLAs
• Participates in creation of milestones associated with major security projects
• Executes on milestones associated with major security projects
• Develops and maintains up-to-date handbook pages, runbooks, workflows, and dashboards
• Provides project status updates on a weekly basis

Educational and Experience Requirements

• 5+ years of experience being part of a Security Operations or similar team
• 3+ years of experience developing automation
• 2+ years of experience conducting adversary emulation exercises
• Experience with security tools and cloud environments (e.g., Vulnerability Scanners, SIEM, SOAR, AWS)
• Experience with industry frameworks, regulations, and standards, such as: MITRE ATT&CK, STRIDE, PASTA, ISO 27001, SOC 2, GDPR, PCI, SOX, NIST, etc.

Preferred Qualifications

• Bachelor's degree in a related field
• Relevant industry certifications, such as CISSP, CISM, or GIAC, are highly desirable

Competencies and Behaviors

• Works independently to maintain and improve overall company security posture
• Collaborates with cross-functional teams
• Translates technical requirements into actionable and time-bound requests
• Drives projects and tasks to completion by following up on questions, deadlines, and requests for input
• Maintains accuracy of information
• Proactive prioritization and escalation to management
• Strong communication skills, including verbal, written, and presentation skills

Benefits

Full-time employees can take advantage of health coverage, paid parental leave, generous paid time-off and holidays, quarterly self-care days off, and stock options. We'll make sure you have the equipment and support you need to work and connect with your teams, at home or in one of our offices.

We have a growth mindset culture that is represented in all that we do, from onboarding through to numerous learning and development initiatives including access to our LinkedIn Learning platform. Employee well-being is also top of mind for us. We host quarterly wellness education sessions to encourage self care and personal growth. From wellness days to ERG-hosted events, we celebrate and energize all 6sense employees and their backgrounds.

Privacy Statement

6sense is committed to protecting the privacy and security of your personal information. We will process your personal data for the purposes of the recruitment exercise, which may include assessing your suitability for the role, background, and reference checks, where applicable. Please see our recruitment privacy policy for more information: https://6sense.com/contractor-recruitment-privacy-notice-romania/

Equal Opportunity Employer

6sense is an Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to [e-mail].