RRemoteville
Guardant Health logoGuardant Health

Senior Security Engineer

Skills
Software As A ServiceAdministrationBiotechnologyCost EngineeringData AnalyticsHealthcareIdentity And Access Management
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • 5+ years in security engineering security operations incident response vulnerability management or detection engineering
  • Broad hands-on experience administering and improving enterprise security tools
  • Experience supporting incident response in a SOC or enterprise security environment
  • Strong experience with SIEM platforms including log ingestion alerting detection content dashboards and operational support
  • Experience with EDR platforms including investigation containment policy management and response workflows
  • Experience with vulnerability management platforms and processes including scanning prioritization remediation tracking and reporting
  • Hands-on experience securing and monitoring AWS or other cloud environments
  • Experience working with identity and access logs preferably including Okta or similar identity platforms
  • Strong understanding of endpoint cloud identity network SaaS and infrastructure security telemetry
  • Experience developing documentation runbooks playbooks and repeatable operational procedures
  • Experience modernizing SIEM logging or security monitoring architectures
  • Experience with detection engineering frameworks such as MITRE ATT&CK
  • Experience building or managing SOAR workflows response automation or security orchestration
  • Experience with cloud security posture management cloud workload protection container security or infrastructure-as-code security tools
  • Strong written and verbal communication skills

Nice to have

  • Technical breadth
  • Operational judgment
  • Mentoring ability
  • Fast-paced adaptability
  • Curiosity
  • Sound judgment
  • Open source interest

Day to day

  • Designs and operates enterprise security tooling across endpoint cloud identity network SaaS logging and response environments
  • Improves threat detection incident response vulnerability management and security automation through hands-on engineering and analysis
  • Partners with security IT and cloud teams to strengthen telemetry visibility optimize platforms and mature the organization’s security posture