Senior Security Engineer, Pantheon

• Proven experience in security operations engineering (SOC, detection engineering, IR, threat hunting, or SecOps leadership)
• Expertise with SIEM/SOAR platforms, endpoint detection (EDR/XDR), cloud logging/monitoring (GCP/AWS), and identity security (Okta or similar)
• Strong technical knowledge of attack techniques (MITRE ATT&CK), incident response workflows, and forensic analysis
• Solid background in scripting/automation (Python, Bash, or equivalent)
• Ability to prioritize and execute during high-pressure incidents
• Strong collaboration skills — you can partner with SRE, Engineering, and GRC teams to keep Pantheon resilient
• Excellent communication and documentation skills for exec-level reporting and team enablement
• Passion for threat intelligence, continuous improvement, and building scalable SecOps capabilities

Desirable

• As a Senior Security Engineer, SecOps, you’ll be the backbone of Pantheon’s security operations — designing, implementing, and running the detection and response capabilities that keep our platform and customers safe. You will lead efforts in threat detection, incident response, and operational resilience, while driving automation and scalable processes to mature Pantheon’s security posture
• This is a hands-on role with leadership expectations: you’ll own key SecOps technologies, shape incident response strategy, and mentor engineers across teams in security best practices
• Pantheon’s core values are Trust, Teamwork, Passion, and Customers First. We value individuality, humor, and balance, and we actively contribute to open-source communities. If you’re excited about modern SecOps and thrive on solving complex security problems, this is the place for you
• Threat Detection & SIEM Operations: Enhance and maintain Pantheon’s SIEM, building detections across cloud, endpoint, and identity sources; tune alerts to reduce noise and increase actionable insights
• Incident Response & Threat Hunting: Lead incident response workflows, build playbooks, conduct tabletop exercises, and proactively hunt for malicious activity across Pantheon’s environment
• Automation & Security Engineering: Build and scale automated workflows for alert triage, enrichment, and response using SOAR, APIs, and scripting
• Vulnerability & Exposure Management: Partner with Engineering and Infrastructure teams to triage vulnerabilities, reduce attack surface, and operationalize remediation
• Abuse & Fraud Prevention: Create and operate automated controls to detect and stop account abuse, credential attacks, and platform misuse
• Identity & Access Monitoring: Strengthen detection around IAM, SSO, and privileged access events with a zero-trust lens
• Business Resilience: Represent SecOps in business continuity and disaster recovery planning, ensuring operational readiness during crises
• Metrics & Reporting: Define and deliver meaningful SecOps metrics to leadership, demonstrating security effectiveness and highlighting areas for improvement
• Mentorship & Team Enablement: Train engineers and incident responders in SecOps processes, tools, and best practices