Développeur(se) principal(e), Opérations de sécurité et intervention en cas d’incident / Senior Security Operations and Incident Response Engineer

About the role

You will serve as a senior, hands‑on security engineer and technical lead for the SecOps team during Americas hours, leading complex investigations and major incidents, providing technical guidance to analysts, and representing SecOps in cross‑team collaborations. Working closely with the SecOps Manager and the EMEA Technical Lead, you will help align priorities, technical standards, and ways of working across the globally distributed team. A key focus is raising the maturity of SecOps and Incident Response capabilities in detection, monitoring, investigation, and response, while helping the team build stronger technical skills and adopt automation and AI‑assisted workflows at scale.

Responsibilities

• Lead and support complex investigations and major incidents, from initial triage and impact assessment through containment, remediation, recovery, and post‑incident analysis.
• Serve as the technical escalation point during Americas hours. Guide analysts and engineers, review investigation approaches, unblock technical challenges, and help the team stay aligned with shared goals and priorities.
• Design and implement workflows for alert enrichment, triage, investigation, containment, case management, and reporting. Identify practical opportunities to use automation and AI to reduce manual work and improve analytical quality.
• Build and tune detections, reduce noise, identify telemetry gaps, and use lessons from incidents to strengthen monitoring and response playbooks.
• Partner with technical and non‑technical stakeholders, clearly communicate risks and response decisions, and help drive cross‑functional security work to completion.

Requirements

• Experience in Security Operations, Incident Response, Detection Engineering, Threat Hunting, or a related security role.
• Experience leading or providing senior technical support during complex and high‑impact incidents.
• Strong investigative skills, including reconstructing attack timelines and correlating data across cloud, identity, endpoint, and corporate environments.
• Demonstrated hands‑on experience with modern SecOps and Incident Response tooling, including platforms for security monitoring, investigation, response, orchestration, and automation.
• Experience building automations or integrations using scripting, APIs, or workflow platforms.
• Strong knowledge of at least one major cloud platform: AWS, GCP, or Azure.
• Experience mentoring analysts and acting as a technical escalation point.
• Strong judgment and communication skills, with the ability to operate effectively under pressure and represent SecOps with senior stakeholders.
• Experience applying AI‑assisted tools to investigations, detection, or security workflows is highly valued.

Pay

We determine the base salary range for this role based on your primary work