Member of Technical Staff, Envoy
SecOps & Threat Detection Engineer
$265-300k
+ Equity
3+ days a week in office
Flexible workplace platform
Be an early applicant
Flexible workplace platform
201-500 employees
Be an early applicant
$265-300k
+ Equity
3+ days a week in office
201-500 employees
Company mission
To create a world where workplaces work better.
Role
Who you are
- 10+ years of experience in Security Engineering, SRE, or Infrastructure Engineering with a strong security focus
- Proven experience designing or significantly improving security monitoring, detection, or SIEM systems
- Strong understanding of cloud environments (ideally AWS), including IAM, networking, and logging at scale
- Experience working with endpoint detection and response tools such as SentinelOne or similar
- Deep experience working with logs, events, and telemetry to build meaningful, high-signal detections
- Strong programming or scripting skills (Python, Go, or similar), with a focus on automation and system design
- A strong understanding of attacker behavior and the ability to translate threats into detection strategies
- Experience defining alerting models and reducing noise while maintaining strong coverage
- Ability to operate in ambiguous environments and define structure where none exists
- Strong cross-functional communication skills, with the ability to influence engineering and leadership
- A pragmatic, outcome-oriented mindset focused on reducing real risk and improving operational effectiveness
What the job involves
- This is an L5 opportunity. Successful candidates typically come from staff or principal-level roles and are recognized for establishing technical direction, leading large-scale initiatives, and shaping engineering strategy across organizations
- We are building a proactive, engineering-led security function focused on threat detection, visibility, and automation
- We are looking for a Staff Security Engineer to own and evolve our Security Operations and Threat Detection capabilities. This role is responsible for defining how we detect, monitor, and respond to threats across our infrastructure, applications, and endpoints
- Today, much of our security posture is reactive. This role will lead the shift toward a system where detection is reliable, measurable, and engineered, not improvised
- You will work across Infrastructure, Platform, and Workplace teams to ensure we have full visibility into our environment and can confidently answer: “If we had a security incident, how quickly would we know?”
- Own the design and evolution of our threat detection and security operations capability
- Define detection strategy across cloud infrastructure, applications, and endpoints
- Establish and improve our SIEM and monitoring architecture, including signal quality, coverage, and scalability
- Design and implement detection-as-code practices, setting standards for how detection logic is built, tested, and maintained
- Drive visibility across all critical assets, ensuring endpoints, services, and identities are consistently monitored
- Take ownership of endpoint security monitoring (e.g., SentinelOne), including integration into centralized detection workflows
- Lead the design and rollout of automated security controls, including secrets rotation for high-risk systems
- Define alerting strategy, including severity models, escalation paths, and on-call expectations
- Lead investigations into complex or ambiguous security signals, setting the standard for root cause analysis and response
- Partner with engineering teams to improve instrumentation and ensure systems emit high-quality security signals
- Define and track key metrics such as Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR), and drive measurable improvements
- Mentor and guide other engineers, raising the overall capability of the team in detection and security operations
Our take
Envoy is a visitor management platform. Envoy offers a raft of workplace management tools, which help businesses ensure that their shop floor runs efficiently.
Envoy has already helped organise tens of thousands of locations globally, and brings together several solutions in a flexible package. The platform manages hybrid schedules, welcomes guests, helps companies improve security, assists with the management and booking of rooms for collaboration, and even plays a role in structuring mailrooms more effectively.
A 2022 series C funding round took the company to a valuation of over $1B. It has been invested into company growth and creating more tools for secure and connected workplaces.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-10% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Jan 2022
$111m
SERIES C
May 2020
$30m
LATE VC
Total funding: $200.2m
Company benefits
- Flexible time off to help you relax and recharge
- Learning and development stipends
- Full health coverage for you and your dependents
- A remote working credit to set up your home office
- $100 monthly wellness credit
- $100 headphone credit every 2 years
- A 401K, so you can invest in your future
- 12 weeks of paid parental leave
Company HQ
SoMa, San Francisco, CA
Leadership
Larry Gadea
(Founder & CEO)Software Engineering at Carleton University. Systems Performance Consultant at Milo and Shopify. Infrastructure Engineer at Twitter. Founded Envoy in 2013.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 11 more jobs at Envoy