Responsibilities

The Security Operations Engineer will own inbound security triage, monitoring and sorting HackerOne bug-bounty reports, Vanta compliance alerts, HubSpot support tickets, and internal security requests, quickly assessing severity and business impact, filing actionable tickets, and routing them to the relevant product teams. They will manage and improve security tooling, including overseeing and maintaining the Mobile Device Management system (Jamf) and EDR, triage and follow up on IDS alerts, coordinating with Engineering and Infrastructure teams where needed, and drive incident response & follow-through by coordinating investigation, remediation, and post-mortem activities. The role also involves tracking SLAs, chasing blockers, and closing the loop with reporters, tuning alert rules, improving duplicate/false-positive handling, and feeding lessons learned back into detections and playbooks, as well as supporting compliance & assurance initiatives by collecting evidence for audits and partnering with the Security Engineering and Compliance teams to turn operational gaps into long-term control improvements. Additionally, the Security Operations Engineer will champion security culture by responding to ad-hoc security questions, contributing to internal training, FAQs, and knowledge-base articles, and ensuring alerting systems and workflows remain effective, actionable, and low-noise.