Senior Security Engineer, Security Operations

Ocrolus is a fast-growing financial technology organization with many emerging security threats and we are building a world-class security program to keep Ocrolus and our customer’s data secure.  We are looking for a diverse set of security practitioners to help us design, build, and scale security at Ocrolus.  We value critical thinking, creativity, data-driven and intelligence-driven approaches, and offensive experience.  We believe security is a collaborative and open process, where security is a partner to help achieve business goals securely.  We believe in saying “yes, and” instead of “no” when recommending security objectives.  We don’t believe in using fear or penalty for enforcement of security policies and processes, and we will always provide evidence and justification for security controls.

Responsibilities:

• Run Ocrolus’ security operations program.
• Build and manage technology and processes that enable log management, threat detection, incident response and recovery, automation and orchestration, and threat hunting.
• Own our threat detection and incident response program, including investigation procedure, response and recovery playbooks, and automation.
• Triage and investigate security alerts and perform and manage security investigations.
• Identify the relevant telemetry and build and manage the technology that enables our threat hunting program.
• Design, build, and test detections and alerts that will increase the efficacy of our security program.
• Own our threat intelligence program, including collection, analysis, and dissemination of threat intelligence to the security team and the entire organization.
• Perform threat hunting, threat intelligence analysis, breach readiness, and red team exercises.
• Perform and manage tabletop breach readiness and red team exercises.
• Provide clear and detailed documentation for detections, investigations, and hunts.
• Build relationships with stakeholders throughout the organization.
• Help build a collaborative and enlightening world-class security team at Ocrolus.
• Spread security culture throughout the organization.

Requirements:

• Experience conducting and managing security investigations.
• Experience running, growing, or scaling a security operations or threat detection and response program.
• Experience engineering and building threat detections, incident response and recovery runbooks, automation and orchestration, and threat hunting.
• Deep knowledge of technology and processes used in security operations.
• Ability to explain basic security, engineering, networking, and cloud concepts.
• Great communication, prioritization, and project management skills