Security Engineer at Semperis

At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee. **US Citizenship required. What we are looking for: We are looking for an experienced Security Engineer to join our security operations team with a strong focus on detection and response. This is a unique opportunity to leverage your threat detection and response experience and build some of the foundational systems and services to keep our infrastructure free from malicious actors and threats. You will partner closely with all engineering teams, IT administrators, and compliance analysts to ensure that we maintain sufficient visibility into our environments and develop effective programs and practices to ensure that our environments are always secure. Tooling and automation will be key to success as we scale our environments to meet customer demand.   What You Will Do: - Collaborate with different teams for building and setting up pipelines needed to gather relevant security telemetry. - Build and maintain an effective and scalable security monitoring infrastructure solution. - Develop detection strategies to identify anomalous activity and ensure that our critical infrastructure and services operate in a safe environment. - Triage alerts and drive security incidents to closure while reducing their potential impact to Semperis. - Build processes and workflows to triage security alerts and respond to real incidents. - Research new threat attack vectors and ensure that our detection and response capability is in line with the current threat landscape. - Proactively improve the quality of our detection rules and strive to eliminate classes of issues by working directly with engineering teams. - Contribute to strategy, risk management, and prioritization for all efforts around detection and response. - Collaborate with the compliance team to maintain and audit security controls and processes, ensure compliance with relevant security frameworks and certifications. - Pragmatic implementing business-focused controls to safeguard the company´s multi-cloud entities.   What You Will Bring: - 5+ years of relevant industry experience. - Strong domain knowledge in security incident detection and response, with a proven ability to operate, optimize, and enhance the effectiveness of the Security Operations Center (SOC). - Demonstrated experience with effective incident response and containment practices, preferably in a cloud-first environment. - Hands-on experience in instrumenting and deploying telemetry solutions. - Experience with operating open-source and/or commercial solutions for logging and security event management, including SIEM and SOAR platforms such as Splunk, Microsoft Sentinel, SolarWinds, Trellix, and similar tools. - Experience in managing and fine tunning CNAPP platforms such as WIZ, Orca, Defender, Singularity or other similar solutions. - Ability to script or code fluently in an interpreted language like Python, PowerShell or Javascript. - Proficiency in automation using tools such as Logic Apps, Azure Functions, AWS Lambda, and Runbooks. - Strong experience in analyzing IAM configurations and entities behavior across multi-cloud and multi-account environments, detecting potential breaches, identifying security gaps, and responding to threats in real time. - Decision-maker with the ability to operate with freedom and autonomy. - Experience working with distributed teams and other cross-functional stakeholders. - Ability to manage competing priorities and workload. - Experience or strong familiarity with DevOps practices and Agile methodologies is a plus. - Experience with cloud deployments in AWS, GCP, or Azure is a plus.   Why Join Semperis? You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you. **Semperis maintains office locations in several cities across the globe. Candidates who reside within 45 miles of one of our offices—or where the job description specifies a required location—will follow our hybrid work model. This includes working onsite some days per week and remotely the remaining days. SEMPERIS IS AN EQUAL OPPORTUNITY EMPLOYER AND WILL NOT DISCRIMINATE AGAINST AN APPLICANT OR EMPLOYEE BASED ON RACE, COLOR, RELIGION, CREED, NATIONAL ORIGIN OR ANCESTRY, ETHNICITY, SEX (INCLUDING GENDER, PREGNANCY, SEXUAL ORIENTATION, AND GENDER IDENTITY), AGE, PHYSICAL OR MENTAL DISABILITY, VETERAN OR MILITARY STATUS, GENETIC INFORMATION, CITIZENSHIP, MARITAL STATUS, OR ANY OTHER LEGALLY RECOGNIZED PROTECTED BASIS UNDER FEDERAL, STATE, OR LOCAL LAW. THE INFORMATION COLLECTED BY THE SEMPERIS APPLICATION IS SOLELY TO DETERMINE SUITABILITY FOR EMPLOYMENT, VERIFY IDENTITY, AND MAINTAIN EMPLOYMENT STATISTICS.    APPLICANTS WITH DISABILITIES MAY BE ENTITLED TO REASONABLE ACCOMMODATION UNDER THE AMERICANS WITH DISABILITIES ACT AND/OR OTHER APPLICABLE STATE OR LOCAL LAWS. A REASONABLE ACCOMMODATION IS A CHANGE IN THE WAY THINGS ARE NORMALLY DONE WHICH WILL ENSURE AN EQUAL EMPLOYMENT OPPORTUNITY WITHOUT IMPOSING UNDUE HARDSHIP ON SEMPERIS. PLEASE INFORM SEMPERIS REPRESENTATIVE ANNA TAYLOR, DIRECTOR OF GLOBAL RECRUITING, IF YOU NEED ASSISTANCE COMPLETING THIS APPLICATION OR TO OTHERWISE PARTICIPATE IN THE APPLICATION PROCESS.