Operations Security Engineer

Operations Security Engineer

We are seeking an experienced Operations Security Engineer to support and enhance the security posture of our infrastructure, both on‑premises and in the cloud (specifically in GCP). In this role, you will leverage your expertise in automation tools, scripting, and security best practices to perform regular assessments, maintain secure configurations, and respond to potential threats. You will also play a critical role in operating and optimizing our Security Information and Event Management (SIEM) solution.

This is a hybrid‑onsite position (onsite 3x per week), based out of our new office in the heart of San Francisco.

Maintain and improve security controls in both on‑premise data center and third‑party cloud platforms like Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft’s Azure.

Collaborate with Dev Ops, IT, and engineering teams to ensure secure configuration and deployment of services.

Develop and maintain automation scripts using Terraform, Ansible, Python, and Bash to streamline security operations. Implement infrastructure‑as‑code (IaC) principles to improve consistency and repeatability.

Conduct regular security audits and vulnerability assessments of servers, network devices, and cloud resources. Recommend and implement mitigation strategies for identified risks and vulnerabilities.

Drive network segregation initiatives to minimize the attack surface and contain potential breaches. Oversee hardware and software inventory management, ensuring all components comply with security standards.

Manage day‑to‑day SIEM activities, including log ingestion, correlation rule development, and real‑time monitoring. Analyze alerts and investigate security incidents, escalating or remediating as appropriate.

Work cross‑functionally with various teams (e.g., IT, Dev Ops, Incident Response) to align security objectives and best practices across the organization. Contribute to the development and maintenance of security policies, procedures, and documentation.

Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience). Proven experience in operations security, with a strong focus on both on‑premises data centers and cloud environments.

Strong experience in deploying, operating, and optimizing Elastic SIEM within the Elastic Stack (ELK), including log ingestion, alerting, and event correlation. Proficient in Kibana for data visualization, querying, and building dashboards to support threat detection and incident response. Hands‑on experience working in a Security Operations Center (SOC) or a similar security‑focused environment. Proficiency with configuration management and automation tools (Terraform, Ansible), scripting (Python, Bash), and command‑line interfaces.

Strong experience with security assessment methodologies, including vulnerability scanning, penetration testing, and configuration audits. Well‑versed in network security best practices, including network segmentation strategies, firewall configurations, and related security measures. Familiarity with blockchain and cryptocurrency technologies is a plus. Experience in fine‑tuning base LLM models for security operations is a plus. Knowledge of Digital Forensics and Incident Response (DFIR) is a plus.

Excellent problem‑solving and analytical skills, with the ability to interpret security logs and alerts. Effective communication skills for cross‑team collaboration and reporting to stakeholders. Strong organizational skills and attention to detail.

Base Salary Range: $150,000 – $235,000/yr.

This position can be considered across multiple levels. Total compensation at DFINITY consists of base salary + generous bonus and is determined based on multiple factors including job leveling, areas of expertise, educational background, geographic location and overall experience. In addition to the cash…