Senior Security Operations Engineer, League

• Bachelor of Science degree (BS) in Computer Science (or a related field)
• 5+ years of experience in security operations, incident response, or a related role
• Deep and broad technical understanding of security concepts, principles, and technologies
• Experience with security monitoring tools (e.g., SIEM, EDR), including configuration and administration of these tools
• Proven leading and coordinating incident response processes and methodologies
• Proficiency in scripting languages (e.g., Python, Go)
• You have some Infrastructure as Code (Terraform, Ansible) experience or a strong desire to learn
• Experience with threat intelligence platforms and implementing these in security operations
• Strong analytical and problem-solving skills
• You are a collaborator at your core
• Excellent communication and interpersonal skills
• We also accept and encourage applicants who have existing software engineering experience and want to explore security and applicants who may have done a security program in a post-secondary institution. There are people across the engineering organization who are ready to help grow technical skills and who want to learn more about security

Desirable

• League’s Security Engineering teams are responsible for scaling security in the development lifecycle and managing security incident management
• We believe in security by design and follow a paved road philosophy by building or buying tools that we can integrate into our platform to ultimately make it easier for our engineers to do the right thing
• As a Senior SecOps Engineer you will care deeply about “what goes bump in the night”
• You have peers in Security Engineering who care about “build it secure” at League, your role is to ensure both validation and response occurs when inevitable challenges arise
• This role will focus on detection, response, tuning, and refinement. Security Engineers and Analysts on our SecOps team take pride in response
• Security Monitoring and Incident Response:
• Monitors security events and alerts from various sources (SIEM, endpoint detection, SASE, etc.) and analyzes them to identify potential security incidents
• Leads security incident response efforts, including investigation, containment, eradication, and recovery
• Develops and maintains incident response plans, playbooks, and procedures
• Coordinates with cross-functional teams (IT, Engineering, Legal, etc.) during security incidents
• Perform root cause analysis of security incidents and recommend preventive measures. Independently analyzes complex security incidents, identifying root causes and developing solutions and drives them to completion
• Participate in an on-call rotation
• Security Tooling and Automation:
• Manage and maintain security tools and technologies, such as SIEM, EDR, and SASE platforms
• Develop and implement automation scripts and workflows to improve security operations efficiency and effectiveness
• Demonstrated ability to leverage GCP services (e.g., Cloud Functions, Cloud Run) to host and automate security scripts and tools for event enrichment and response
• Proficiency in utilizing GCP services like Pub/Sub, Dataflow, BigQuery, and Cloud Storage for data processing, analysis, and enrichment
• Evaluate and recommend new security tools and technologies to enhance our security posture
• Manage and maintain infrastructure through Terraform
• Threat Management:
• Conduct threat research and analysis to identify emerging threats and vulnerabilities
• Develop and implement threat detection rules and use cases
• Security Engineering and Architecture:
• Contribute to the design and implementation of security systems architectures and solutions
• Evaluate and recommend security controls for new and existing systems
• Ensure security best practices are followed in system development and implementation
• Collaboration and Communication:
• Collaborate with other teams to ensure security is integrated into all aspects of the organization's operations
• Communicate security risks and issues to technical and non-technical audiences, including leadership
• Mentors and provides guidance to junior security analysts and engineers to develop their technical growth
• Compliance and Reporting:
• Ensure compliance with relevant security standards and regulations (e.g., HITRUST, NIST, GDPR)
• Prepare and present security reports to management
• Participate in routine audits within the organization
• Security-Related Responsibilities:
• Compliance with Information Security Policies
• Compliance with League’s secure coding practice
• Responsibility and accountability for executing League's policies and procedures
• Notification of HR, Legal, Compliance & Security of any incidents, breaches or policy violations

• Applying to a role you love can be exhausting, and understanding the next steps can feel vague and uncertain. You have done the hard part of submitting your application; let's do ours by sharing potential next steps
• You should receive a confirmation email after submitting your application
• A recruiter (not a computer) reviews all applications at League
• If we see alignment with League's needs, a recruiter will reach out to learn more about your goals. The recruiter will also share the team-specific interview process depending on the roles you are exploring
• The final step is an offer, which we hope you will accept!
• Prior to joining us, we conduct reference and background checks. Additional checks could be required for US Candidates, depending on the role you are exploring