Security Operations

• Own the full lifecycle of security detection and response inside the SOC
• Design and maintain SIEM detection rules
• Triage daily SIEM alerts
• Build and maintain SOAR playbooks
• Manage end-to-end vulnerability triage process
• Review and approve IAM policy changes
• Conduct infrastructure security control checks
• Provide SOC and cloud posture metrics for reporting

Security Operations Engineer

• Act as the first responder for security alerts from GuardDuty, dependency advisories, and other detection sources. Assess severity and escalate to the right lead across Platform, Product, Anti-Abuse, or Security.
• Own customer security tickets in Front, including account recovery, MFA reset, GitHub-linked account loss, billing-based ownership verification, and org ownership disputes.
• Participate in the on-call pager rotation alongside other Security Operations Engineers and use documented playbooks to make consistent decisions.
• Maintain and improve runbooks, decision trees, Front macros, and escalation paths. Identify patterns in tickets and alerts to flag opportunities for automation or workflow improvements.
• Triage internal IT requests (access provisioning, SSO/Okta issues, device questions, MDM enrollment) and help maintain access records, joiner-mover-leaver hygiene, and compliance audit trails.
• Communicate clearly with customers, engineers, and internal stakeholders during sensitive or time-critical issues.

• Develop secure systems to protect Lido Protocol, DAO, applications, contributors, partners, and stakers.
• Define processes, systems, and applications to make attacks difficult to execute and easy to detect.
• Embed security practices and tools within the development pipeline.
• Develop and maintain incident response plans and playbooks.
• Perform regular vulnerability assessments and penetration testing.
• Lead or participate in incident response activities, including investigation, containment, eradication, and recovery.
• Monitor security alerts and incidents to identify and respond to threats promptly.
• Collaborate with development and operations teams to ensure security is incorporated from design to deployment and maintenance.
• Provide training and support on security tools and techniques, emphasizing soft skills like communication, negotiation, and influence.

Security Operations jobs in Worldwide

See all jobs on JobTailor

Security Operations Engineer

Security Operations Engineer

SecOps Engineer