Senior Security Operations Engineer

security operationsSIEMthreat detectionincident responseautomationcloud securityAWSGCPTerraformKubernetesPythonBashDevOpsMITRE ATT&CKNISTISOforensicsmalware analysisnetwork security

Key details

Salary

Not specified

Employment type

Full-time

Seniority

Senior

Years experience

5-10

Location

United States

Full job description

MNTN is hiring a Senior Security Operations Engineer to lead and scale security operations. Responsibilities include monitoring, detection, investigation, and response to security incidents; implementing security controls in cloud infrastructure (Terraform, Kubernetes, CI/CD, ArgoCD, GitHub); developing SIEM rules and playbooks; driving incident response; automating SecOps processes; conducting threat hunting; collaborating with DevOps and engineering teams; performing log analysis; leading security assessments; and supporting compliance audits. Requirements include 5+ years in Security Operations, strong SIEM knowledge, expertise in threat detection and forensics, scripting skills (Python, Bash), understanding of network and cloud security, experience with AWS and GCP, familiarity with security frameworks (MITRE ATT&CK, NIST, ISO), leadership skills, and security certifications are a plus. Role is full-time and remote, based in the United States.

What you'll do

Lead day-to-day security operations, including monitoring, detection, investigation, and response to security incidents
Understand modern cloud infrastructure stacks and inject security controls in those stacks (Terraform, Kubernetes, CI/CD, ArgoCD, GitHub)
Develop, refine, and maintain SIEM rules, alerts, dashboards, and playbooks for proactive threat detection
Drive incident response efforts, including triage, containment, eradication, recovery, and post-incident reporting
Automate repetitive SecOps processes (e.g., enrichment, remediation, alert triage) to improve efficiency and reduce noise
Conduct threat hunting activities to identify hidden threats and vulnerabilities
Collaborate with DevOps and engineering teams to embed security best practices into systems and workflows
Perform log analysis and security monitoring across cloud, endpoint, and network environments
Lead security assessments and participate in vulnerability management and remediation programs
Partner with compliance and risk management teams to support audits and regulatory requirements

Requirements

5+ years of hands-on experience in Security Operations
Strong knowledge of SIEM platforms
Expertise in threat detection, malware analysis, and forensic investigation
Proficiency with scripting and automation tools (Python, Bash, etc.)
Solid understanding of network protocols, firewalls, IDS/IPS, EDR, and cloud security controls
Experience with cloud platforms (AWS and GCP) and their native security services
Familiarity with MITRE ATT&CK, NIST, ISO, and other security frameworks
Excellent communication and leadership skills, with experience guiding teams or projects
Security certifications a plus