Job details

Security Operation Engineer

Get a free resume review

Position Overview

We are seeking a Security Operations Engineer to lead our vulnerability management program, oversee security assessments, and provide technical security expertise. This role will be crucial in maintaining our security posture through proactive security measures and third-party security programs.

Key Responsibilities

Develop and manage comprehensive vulnerability management program
Create and maintain threat models for GCP, cloud, and onprem linux systems
Coordinate and oversee penetration testing engagements with external vendors
Establish and manage bug bounty program, including triage of submissions
Support security compliance efforts with technical knowledge and documentation
Track and report on security metrics and KPIs
Collaborate with engineering teams to remediate security findings

Required Qualifications

3+ years of experience in security operations or vulnerability management
Experience managing vulnerability scanning tools and processes
Strong understanding of threat modeling methodologies
Experience coordinating penetration testing engagements
Technical knowledge to address complex security inquiries
Understanding of common security frameworks (SOC 2, ISO 27001, etc.)
US person
- Natural Citizenship or Green Card
Position requires in office 5 days a week

Preferred Qualifications

Experience managing bug bounty programs
Familiarity with cloud security (AWS, GCP, Azure)
CISSP Certification
Experience with security tooling and automation (Snyk, SentinelOne)
Background in software development or infrastructure

Average salary estimate

$100000 / YEARLY (est.)

min

max

$80000K

$120000K

If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.

What You Should Know About Security Operation Engineer, Windsurf

Are you passionate about enhancing security and tackling challenges head-on? Join us as a Security Operations Engineer at our Mountain View office, where you'll be at the forefront of our vulnerability management program. In this dynamic role, you will oversee security assessments and deliver technical security expertise, all crucial for maintaining and strengthening our security posture. You'll dive deep into developing a comprehensive vulnerability management program, crafting and maintaining threat models for Google Cloud Platform, on-prem Linux systems, and more. Your leadership will guide penetration testing engagements with external vendors, and you'll play a key role in establishing and managing our bug bounty program, including the triage of submissions. Collaborating with our engineering teams will be essential as you help remediate security findings and support compliance initiatives through your technical knowledge and documentation. If you have over three years of experience in security operations or vulnerability management and possess a strong understanding of threat modeling methodologies, we want to hear from you! We're looking for someone who can handle complex security inquiries and understands common security frameworks such as SOC 2 and ISO 27001. Join us and make a significant impact in technology security while working in a collaborative environment five days a week.

Frequently Asked Questions (FAQs) for Security Operation Engineer Role at Windsurf

What are the main responsibilities of a Security Operations Engineer at our Mountain View location?

As a Security Operations Engineer in Mountain View, your primary responsibilities will include developing and managing a comprehensive vulnerability management program, creating threat models for various environments, and overseeing penetration testing engagements. You will also establish and manage our bug bounty program, support compliance efforts, and track security metrics, all while collaborating with engineering teams to address security findings.