Staff Security Engineer, Foodsmart

• This position requires a highly skilled professional who thrives under pressure, has a deep understanding of modern security operations practices, and can independently execute strategies to minimize risk while ensuring operational excellence
• A highly vigilant professional who understands that missing a critical alert or vulnerability can have severe consequences for the organization
• A calm problem-solver who thrives under pressure during active incidents while maintaining focus on resolution and prevention
• A proactive thinker who anticipates potential threats before they materialize and takes action to mitigate them effectively
• A collaborative communicator who can explain complex technical concepts clearly to both technical teams and executives
• At least 8 years of experience in security operations or information security roles with a proven track record of safeguarding critical systems in fast-paced environments
• Expertise in managing SIEM platforms, SOAR tools, EDR/XDR solutions, and other advanced monitoring technologies
• Deep knowledge of modern attack techniques and incident response best practices
• Experience conducting threat hunting exercises across multi cloud environments, SaaS applications, and endpoints
• Strong scripting/coding skills in Python or similar languages for automating workflows within SecOps tools
• Familiarity with compliance frameworks such as SOC 2, HIPAA, HITRUST CSF, or CCPA as they apply to operational environments

Desirable

• Foodsmart is seeking a Staff Security Engineer - Security Operations to take ownership of the security operations function and ensure the safety and resilience of our organization against evolving threats
• This role carries significant responsibility for monitoring, detecting, responding to, and mitigating security risks that could impact Foodsmart’s systems, data, employees, and customers
• You will be at the forefront of protecting Foodsmart’s critical assets by implementing advanced security measures, overseeing incident response efforts, and proactively identifying vulnerabilities before they can be exploited
• Oversee real-time monitoring of security events across Foodsmart’s infrastructure using SIEM tools to detect and respond to suspicious activities
• Continuously improve threat detection capabilities by fine-tuning alerts, building correlation rules, and integrating new data sources into monitoring systems
• Act as the first line of defense during active incidents, lead containment, eradication, recovery efforts, and conduct root cause analysis
• Perform regular threat hunting exercises across Foodsmart’s environment to uncover hidden vulnerabilities or potential attack vectors
• Conduct periodic risk assessments on infrastructure, SaaS applications, endpoints, and third party integrations to identify gaps in security posture
• Implement vulnerability management processes to ensure timely remediation of identified risks
• Develop playbooks for common attack scenarios to ensure rapid response during incidents
• Automate repetitive tasks such as alert triage or remediation workflows using scripting languages like Python or tools like SOAR platforms
• Partner with DevOps teams to enhance CI/CD pipeline security and enforce secure configurations for infrastructure-as-code (IaC)
• Work closely with IT teams to secure endpoints for remote employees and enforce strong identity access management policies
• Serve as a trusted advisor to internal stakeholders by providing actionable recommendations on mitigating risks without disrupting business operations
• Mentor team members on best practices in security operations to foster a culture of vigilance across the organization
• Support compliance initiatives such as SOC 2, HIPAA, HITRUST CSF, and CCPA by maintaining audit-ready documentation of security controls
• Monitor adherence to regulatory requirements while continuously improving processes to meet industry standards