Senior Security Operations Engineer, Resilience
$170-200k
Cybersecurity & cyber insurance solutions
Be an early applicant
Cybersecurity & cyber insurance solutions
201-500 employees
Be an early applicant
$170-200k
201-500 employees
Company mission
To help make the world cyber resilient.
Role
Who you are
- A desire and ability to work in a highly skilled, cross-functional, and growing team, including learning new technologies where required
- Bachelor's degree or higher, or equivalent work experience of 5-10 years
- Intermediate or better knowledge of scripting languages like Python and Bash as it relates to automation and knowledge of log formats, parsing, and collection
- Experience maintaining or being a power user of a SIEM. Experience with SumoLogic is preferred but other leading platforms are a plus
- Strong writing and communications skills to both business and technical stakeholders
- Experience with Endpoint Detection and Response (EDR) such as Crowdstrike
- Experience with Amazon Web Services and other public clouds
- Experience securely integrating systems via APIs via both “off-the-shelf” integrations exist and writing custom ones when required
- Experience with SOAR playbook development is highly desirable
- Experience working in a Security Operations Center (SOC) is highly desirable
- Certifications relevant to Security Operations, Automation, and Digital Forensics are desirable but not required. Ex. GPYC, GCFR, GEIR, AWS Certified Security - Specialty
What the job involves
- Resilience is seeking an extraordinary Senior Security Operations Engineer
- This position is part of the Information Security team which defends Resilience’s endpoints and its SaaS platform
- Ideal candidates will have experience with security operations, associated automation technologies, public cloud, and SIEM
- Your role will primarily focus on enabling the Director of Security Operations to automate and scale Resilience’s security workflows
- This will entail managing SIEM ingestion, cataloguing and refining detections, response automation, SOAR playbook development, and technical documentation
- It will also involve working with partner teams such as Information Technology, Engineering, DevOps, the Risk Operations Center, and Business Operations to ensure outputs from security operations are timely and actionable
- As the program scales, it will increasingly involve the enablement and automation of Threat Hunting, GRC, and Security Architecture workflows
- Develop dashboards, automations, and SOAR playbooks to triage security alerts
- Serve as a system owner and subject matter expert for the SIEM
- Manage the ingestion of appropriate logging into the SIEM
- Participate in the alert review process to identify tuning and automation opportunities
- Refine inbound and outbound logging and tasking workflows with teams such as IT, DevOps, Threat Intelligence, Risk Operations Center, and Business Operations
- Maintain written documentation for security logging ingest and automation which can be communicated and shared with partner teams that need to implement them
- Participate in security architecture and integration reviews, as required
- Participate in security investigations when required
- Integrate security and business intelligence tools into detection, response, and GRC workflows and tooling
Our take
For businesses operating today, cyber insurance is as fundamental as property insurance. However, companies may not be as educated in digital risk-assessment and can end up paying large insurance costs as a result. Resilience integrates risk engineering with their cyber-insurance offerings, allowing middle-market companies to build cyber resilience and access lower cost insurance options.
Traditionally, insurers assess the information security of a company and then write up their coverage, but Resilience instead works proactively to help mitigate problems where it finds them, before the policy is agreed. By doing so, it aligns itself with the interests of the businesses it serves and can form stronger insurer-customer relationships – which are maintained because Resilience offers access to security services for the whole length of the policy.
Resilience has seen significant investment through the years, including from notable investors in the insurance space, demonstrating that their approach is held in high regard. With this, it has invested in accelerating global expansion and scaling the adoption of the "Resilience Solution", its holistic cyber risk platform.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 3 rounds)
Aug 2023
$100m
SERIES D
Nov 2021
$80m
SERIES C
Total funding: $217m
Company benefits
- Stock options
- Bonus structure
- Company sponsored 401K
- Flexible PTO
- Flexible work environment
- Remote-first work culture
- Offices in San Francisco, Chicago, New York and Baltimore
- Competitive health plans
- Professional development and career growth opportunities
- Interest driven Slack channels
- Company off-site events
Company HQ
Yerba Buena, San Francisco, CA
Leadership
Matthew Hall
(Co-Founder & VP of Labs)Owner of MV Security. Worked for ThreatStream and Morta Security. Extensive experience as a Software Engineer.
Davis Hake
(Co-Founder & Advisor)Adjunct Professor on Cyber Risk Management at the University of California, Berkeley. Term Member of the Council on Foreign Relations. Former Director for Federal IT Security with the National Security Council.
Vishaal 'V8' Hariprasad
(Co-Founder & CEO)Cyber Operations Officer with the US Air Force Reserve. Former Architect in Threat Intelligence at Palo Alto.
Raj Shah
(Co-Founder & Executive Chair)Managing Partner with Shield Capital. Adjunct Professor at Stanford University. Founder and Board Member of the Nanubhai Education Foundation.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 3 more jobs at Resilience