Security Operations

• Own the working relationship with CSG on data residency, PII handling, access governance, and model security controls
• Translate policy into guardrails the delivery team and citizen developers can act on
• Build and maintain security tooling, guardrail enforcement, and policy-as-code integrations across Enterprise AI platforms
• Reduce manual review through automation where possible
• Develop reusable security components and patterns that delivery teams and citizen developers can drop into Agent builds—making the secure path the easy path
• Instrument AI platforms to detect anomalous behavior, access patterns, and policy violations
• Build the detection layer, not just consume it

AI SecOps Engineer

• Design, develop, and refactor our custom internal security platform across both the backend (FastAPI) and frontend(React).
• Partner with security analysts to turn manual workflows into automated, reliable processes.
• Integrate and operationalise AI/ML utilities (such as LLMs) into our security platform to assist analysts with threat investigation and incident summarisation.
• Work with our infrastructure in GCP, using Kubernetes for orchestration and Terraform for resource management.
• Leverage our monitoring and alerting tools (Prometheus/Grafana) to detect failures early and maintain high availability across the internal security platform the team owns.
• Build and maintain API integrations that connect our detection tools, ticketing systems, and customer environments.
• Champion code quality through code reviews, testing practices and CI/CD pipelines.

Senior CSOC Engineer

• Lead enterprise-scale Identity & Access Management (IAM) operations and governance
• Drive consistent, resilient, and audit-ready security outcomes
• Establish and scale a repeatable operating model for IAM outcomes across regions
• Ensure enterprise IAM governance processes are executed consistently
• Partner with Risk, Audit, and Compliance teams
• Execute IAM modernization initiatives including workflow automation

Senior Manager, Information Security Operations

• Serves as a senior technical leader within the Cybersecurity Operations Center
• Focused on advancing detection engineering, automated response, and threat intelligence capabilities
• Responsible for designing, developing, and continuously improving high-fidelity detections across enterprise telemetry
• Engineering automated response workflows that reduce response times and operational burden
• Champion modern CSOC practices including detection-as-code, threat-informed defense, and integration of AI and agentic workflows
• Partners closely with cross-functional teams across infrastructure, cloud, identity, and application domains
• Drives innovation in CSOC operations, translates threat intelligence into actionable detections and hunts
• Mentors junior engineers and analysts, fostering technical growth and promoting scalable, repeatable security operations processes

Senior Cybersecurity Operations Engineer – AI

• Supports security, safety and protection efforts for Independent Health associates, guests, visitors, members and properties
• Responsible for 24x7 monitoring, reporting and response associated with Physical Security initiatives at the main campus, affiliate, and Medicare Information Center locations
• Includes oversight of access controls, alarms, CCTV, and accurate and timely notification of events impacting physical security and/or facilities to the appropriate IH team member
• Daily monitoring of security cameras and campus site/buildings
• Physical security liaison to IHA & IHC associates
• Support of IHA & IHC departmental needs including escort
• Familiarity and response to campus emergency and security incidents/events including 911 calls
• Maintenance and preparation of daily reports, logs and incident reports as required
• Answer alarms and investigate disturbances, coordinating with Facilities managers as appropriate
• Report unlawful activities such as theft or vandalism to law enforcement officers for further actions
• Coordinate with guard force to include but not limited to, assessing; validating routine patrol rounds are conducted within the assigned premises; ensuring daily reports, logs and incident reports are completed by the security guard force

Security Operations Center Officer

• Monitor SIEM, EDR, NDR, and cloud security tooling for alerts, anomalies, and indicators of compromise; review and triage escalations from the third-party SOC provider
• Conduct proactive threat hunting using intelligence feeds, MITRE ATT&CK TTPs, and hypothesis-driven queries
• Lead containment, eradication, and recovery for confirmed incidents; coordinate with Engineering, Legal, and Leadership on high-severity events
• Respond to on-call pages per the team rotation schedule; write clear incident reports covering timeline, impact, root cause, and corrective actions
• Analyze malware samples, phishing campaigns, network traffic, and endpoint artifacts to determine scope and attacker TTPs
• Identify detection gaps and propose new SIEM rules, correlation logic, and tuning improvements
• Author and maintain SOC runbooks and playbooks used by both in-house and third-party teams; contribute to weekly/monthly reporting on incident trends and third-party SLA adherence

Senior SOC Analyst

• The InfoSec Ops Senior Associate will handle a variety of operational and program management tasks related to data privacy and information security.
• You will be responsible for handling cadenced tasks (e.g., daily/weekly), high-priority escalations, and some program management responsibilities.
• You will also take ownership of privacy and security readiness efforts for high-visibility launches.
• Your operational responsibilities will include:
• Evaluating vendors’ data collection practices and security postures, working with internal teams and vendor teams to understand the types of data each vendor would collect, communicating Instacart’s security and privacy requirements.
• Tracking and reporting metrics on InfoSec Ops initiatives.
• Assisting with large-scale audit readiness efforts.
• Organizing, coordinating, and tracking cross-functional privacy and security projects involving multiple stakeholder teams.
• Acting as the DRI representing Trust & Safety’s privacy and security operations teams in high-visibility company-wide initiatives.
• Your program management responsibilities will include:
• Building and maintaining workflow documentation.
• Automating and monitoring recurring tasks using AI agents.
• Proactively coming up with ideas to improve operational efficiency.
• Identifying, tracking, and reporting success metrics.

Senior Trust & Safety Associate, Information Security Ops

• Vital leader of the Security Incident Response team overseeing all operations around the Globe.
• Incident Response Oversight: Providing oversight to security incidents from detection to resolution, continuously looking to improve rapid response capabilities.
• Team Optimization and Agile Learning: Ensure optimal staffing and resourcing, focusing on continuous skill development and career progression within an agile security environment.
• Resource and Vendor Management: Working with Security leadership to ensure tooling and resources are available to incident response teams.
• Performance Engineering: Guide team performance, ensuring adherence to established SOPs and best practices in security integration.
• Strategic Communication Protocols: Manage communication protocols during incidents, ensuring clarity and timeliness.
• Cross-Functional Collaboration: Facilitate collaboration across Product, Infrastructure, SREs, GRC, ensuring cohesive incident response strategy.
• Continuous Process Improvement: Regularly refine incident response processes, incorporating the latest advancements for enhanced agility.
• Strategic Leadership for Scalability: Provide visionary leadership, ensuring operational scalability and efficiency in line with business needs.
• Team Development in a Security-Focused Culture: Cultivate a high-performance team, enhancing capabilities through training and development.
• Incident Documentation and Process Automation: Oversee incident documentation, refining response playbooks and guidelines with a focus on automation in security processes.
• Security Technology Management: Govern the development and maintenance of security tools, emphasizing integration in existing security pipelines.
• KPI-Driven Performance Assessment: Implement and monitor Key Performance Indicators to evaluate and improve incident response effectiveness.
• On-Demand Operational Readiness: Maintain readiness for critical incident management outside standard hours, integrating on-call responsibilities.

Director, Global Security Incident Response

• Own a region of North America data center security operations program across owned and colocation sites
• Partner with data center build and engineering teams on new-site design and activation, ensuring security scope is defined, delivered, and turned over to operations cleanly
• Lead the regional vendor portfolio such as integrators, guard-force providers, and general contractors with meaningful budget and SLA ownership
• Author and maintain the policies, standards, and SOPs that govern physical security in the region, keeping them aligned with company-wide frameworks
• Lead physical security incident response and investigations

Lead, Data Center Security Operations

• Assist with monitoring and triaging security alerts across endpoint, identity, cloud, enterprise, and internal systems.
• Support incident response efforts by collecting logs and evidence, documenting timelines, and helping track follow-up actions.
• Help improve vulnerability management processes by validating findings, tracking remediation, and partnering with system owners on fixes.
• Contribute to the creation and maintenance of security playbooks, runbooks, and operational documentation.
• Assist with phishing investigations, access reviews, asset inventory hygiene, and other day-to-day security operations activities.
• Support enterprise security initiatives across SaaS, device, identity, and corporate infrastructure environments.
• Help evaluate and strengthen the security of internal AI systems and AI-enabled workflows, including how they are deployed, accessed, monitored, and protected across the enterprise.
• Help automate repetitive operational tasks using scripts, workflows, or low-code tooling where appropriate.
• Participate in security control validation and operational readiness checks for internal tools and infrastructure changes.
• Be proactive and innovative; we rely on your feedback to help build a secure, resilient company.
• Be a part of a team that believes in transparency, collaboration, grit, and humility, and in doing the right thing for our customers and the company.

Security Operations Intern

• Own the security standard across all Whatnot global office locations
• Manage third-party guard vendors to performance expectations you will define — not just oversight, but accountability
• Partner with Workplace on emergency response programs
• Develop repeatable security playbooks for events ranging from intimate seller meetups to large-scale live activations
• Conduct advance site assessments (in-person or virtual) and implement appropriate security measures
• Serve as the on-the-ground security lead at high-visibility activations, managing vendors in real time
• Assess and mitigate risk for seller engagements, category activations, and community-based initiatives
• Build training and incident response protocols for Category and Community team members working in non-traditional environments: retail floors, warehouses, private residences, etc
• Assist in the initial design and oversight of Whatnot’s travel security framework supporting domestic and international travel
• Support response coordination for travel-related incidents and crises as needed

Corporate Security Operations Manager

• Lead strategic planning, implementation, and continuous monitoring of the information security program
• Define, develop, maintain and implement policies, security architectures, and operational processes
• Drive a culture of security awareness to minimize risk
• Oversee the confidentiality, integrity, and availability of sensitive information

See all jobs on JobTailor