Security Operations Lead Jobs

As a Senior Security Engineer focused on Datadog’s Cloud SIEM product, you will help shape the future of security operations by transforming real-world security expertise into scalable detection, investigation, and response capabilities. You will develop high-impact threat detection content, improve AI-assisted security workflows, and help defenders identify and respond to threats across cloud-native and enterprise environments. Working closely with Product, Engineering, and Security Research teams, you will influence the evolution of Datadog Security products while advancing detection coverage across emerging technologies and attack surfaces. This role offers the opportunity to contribute to open source initiatives, publish security research, and help define the next generation of agentic security operations capabilities. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You'll Do: Research attacker techniques, defensive strategies, and emerging threats, translating findings into scalable security capabilities that protect customers at cloud scale. Design and improve AI-powered investigation, threat hunting, and response workflows that support Datadog’s agentic SOC capabilities. Own the lifecycle of threat detections and automated security workflows, from research and design through deployment, measurement, and continuous improvement. Develop high-fidelity detection content across cloud platforms, SaaS applications, identity systems, endpoints, networks, and other modern attack surfaces. Partner with Product, Engineering, Security Research, and customers to influence roadmap decisions and improve security outcomes across the platform. Mentor security engineers and drive improvements through automation, tooling, rapid prototyping, and data-driven optimization. Who Yo

As a Senior Security Engineer focused on Datadog’s Cloud SIEM product, you will help shape the future of security operations by transforming real-world security expertise into scalable detection, investigation, and response capabilities. You will develop high-impact threat detection content, improve AI-assisted security workflows, and help defenders identify and respond to threats across cloud-native and enterprise environments. Working closely with Product, Engineering, and Security Research teams, you will influence the evolution of Datadog Security products while advancing detection coverage across emerging technologies and attack surfaces. This role offers the opportunity to contribute to open source initiatives, publish security research, and help define the next generation of agentic security operations capabilities. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You'll Do: Research attacker techniques, defensive strategies, and emerging threats, translating findings into scalable security capabilities that protect customers at cloud scale. Design and improve AI-powered investigation, threat hunting, and response workflows that support Datadog’s agentic SOC capabilities. Own the lifecycle of threat detections and automated security workflows, from research and design through deployment, measurement, and continuous improvement. Develop high-fidelity detection content across cloud platforms, SaaS applications, identity systems, endpoints, networks, and other modern attack surfaces. Partner with Product, Engineering, Security Research, and customers to influence roadmap decisions and improve security outcomes across the platform. Mentor security engineers and drive improvements through automation, tooling, rapid prototyping, and data-driven optimization. Who Yo

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. About the Team The Security Operations (SecOps) team at Robinhood proactively safeguards our platform and millions of customers. We monitor, detect, and respond to security threats in real time while staying ahead of risks through threat intelligence, Red Team operations, and research partnerships. We are building the next generation of security operations—leveraging AI-driven automation, Autonomic Security Operations (ASO), and innovative detection frameworks to set the standard across the cybersecurity industry! About the Role As a Staff Security Engineer (IC6) on the Detection & Response team, you will drive our incident response strategy, build robust detection engineering frameworks, and mentor engineers across the organization. In this high-impact role, you will command high-stress incident responses, eliminate operational noise by developing an AI-native detection platform, and help shape the broader AI-agentic ecosystem for SecOps. You will work closely with cross-functional partners in Proactive Security, Security Engineering, Insider Trust, Infrastructure, Legal, and Communications to protect Robinhood’s ecosystem. This role is based in our Bellevue, WA a

Spaulding Ridge is an advisory and IT implementation firm. We help global organizations get financial clarity into the complex, daily sales, and operational decisions that impact profitable revenue generations, efficient operational performance, and reliable financial management. At Spaulding Ridge, we believe all business is personal. Core to our values is our relationships with our clients, our business partners, our team, and the global community. Our employees dedicate their time to helping our clients transform their business, from strategy through implementation and business transformation. What You Will Do and Learn: The Cybersecurity Operations Analyst will support the Cybersecurity Manager in maintaining and improving Spaulding Ridge's security posture. This entry-level role is ideal for someone looking to develop a career in cybersecurity while gaining hands-on experience across security operations, vulnerability management, identity and access management, cloud security, and compliance. The analyst will assist in monitoring security events, responding to security alerts, supporting security projects, and maintaining security documentation while learning from senior members of the Technology & Security team. Security Operations Monitor and analyze security alerts from SIEM, EDR, Firewall, WAF, IDS/IPS, email security, and cloud security platforms. Conduct and Support threat hunting and detection of tuning activities. Monitors open-source and proprietary threat intelligence feeds daily to research threat actor tactics, techniques, and procedures (TTPs). Support the investigation and triage of security alerts and incidents under the guidance of the Cybersecurity Manager. Assist with incident response activities, including documentation, evidence collection, and follow-up actions. Help maintain security playbooks and operational procedures. Vulnerability Management Assist with vulnerability scanning across endpoints, servers, and cloud environments.

Plant Security Head is responsible for ensuring the safety and security of all personnel, assets, and operations within the plant environment. This role entails the development and implementation of comprehensive security strategies that safeguard company resources while promoting a culture of safety and compliance. The Plant Security Head oversees all security operations, including risk assessment, incident response, and the maintenance of safety protocols, ensuring that all security measures align with organizational goals and regulatory requirements. Source: Adani Group | Job ID: 55750

About Appspace: At Appspace, we’re passionate about creating better work experiences for people everywhere, and we’re looking for people that feel the same way. Our global office locations and flexible work culture help you work wherever and however you’re at your best. Plus, we take the time to help you enjoy your work, build lasting connections, and grow your role. Join the Appspace team and be a part of a culture that’s helping people everywhere love where they work. Your Role as a Cloud Security Engineer : We are seeking a highly skilled Cloud Security Engineer to join our dynamic team. This is a crucial customer-facing role where you will be instrumental in designing, implementing secure cloud configurations, being proactive by recommending security by design standards and, securing complex cloud environments for our clients across Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS), with a strong emphasis on GCP. You will leverage your deep expertise in SaaS security, network security, and compliance to provide strategic guidance and hands-on support, ensuring our clients' cloud infrastructures are robust, resilient, and compliant with industry standards. What You'll Do: Cloud Security Operations: Design, implement, and optimize robust cloud security architectures to enhance, build, monitor and address all security alerts from our SIEM and other security systems. This is an operational role whereby you will be available M-F 8am-5pm EDT and, when needed, on-call shifts on evenings and weekends. Network Security Expertise: Your network security and cloud security expertise will be required to respond to customer questionnaires, customer calls and create artifacts including network diagrams, architecture diagram, data flow diagrams and other artifacts to support customer requests. Strong written skills will be required here and attention to detail. SIEM Integration & Optimization: As a Level-2 Security Operation

About the Role The Physical Security Agent, Critical Incident Response Team (CIRT) is responsible for real-time monitoring, triage, and response to incidents that impact DoorDash’s global workforce, assets, and operations. You’ll serve as a front-line responder, analyzing alerts, coordinating response actions, and escalating issues according to established Global Safety & Security (GSS) protocols. This role sits at the heart of DoorDash’s emergency response network — ensuring rapid, informed, and coordinated action during critical events such as natural disasters, workplace emergencies, or significant disruptions. Working closely with regional and global partners, you’ll help keep DoorDash’s people safe and operations running smoothly around the clock. Key Responsibilities Security Operations & Monitoring Monitor and assess alerts from global intelligence, safety, and security systems to identify potential threats or incidents Patrol and assess potential behavioral escalations or concerns Conduct routine lobby and facility patrols to ensure safety, security, and compliance Perform door, camera, and access point checks Access Control & Visitor Management Manage employee and guest badging, including badge printing, activation, and access level assignments (experience with Genetec, Lenel S2, or similar systems) Incident Response & Safety Triage incidents, determining severity and escalation requirements in accordance with CIRT standard operating procedures Act as the initial point of contact for incident reporting, ensuring information is captured accurately and escalated efficiently De-escalate situations involving employees, vendors, and guests as needed Support activation and execution of emergency response and crisis communication protocols Employee Engagement Coordinate with internal teams (e.g., Workplace, HR, Legal, Comms, Operations) and external partners (e.g., law enforcement, emergency services) during incident response Disseminate timely sit

About the Team The Industrial Security team enables OpenAI’s classified and national security work by building secure, compliant programs that support government customers and protect sensitive information. Within Industrial Security, the Personnel Security function ensures employees have the clearances, accesses, briefings, and government approvals required to support classified programs. We work closely with employees, program teams, government customers, and partners across Security, People, Recruiting, Legal, IT, and Facilities to make complex security processes accurate, timely, and understandable. About the Role As a Personnel Security Specialist, you will own the day-to-day personnel security operations that allow OpenAI employees to support classified government work. You will manage clearance and access requests, maintain government-system records, coordinate visits and briefings, support onboarding and offboarding, and guide employees through sensitive security requirements with discretion and care. We’re looking for a hands-on security professional who can independently manage a high-volume operational queue, keep cases and records organized, recognize when issues require escalation, and improve the processes behind the work. This role offers the opportunity to help build a modern personnel security function that supports important national security programs while delivering a thoughtful, responsive employee experience. This role is based in San Francisco, CA, or Washington, DC. We use a hybrid work model of three days in the office per week and offer relocation assistance to new employees. Additional onsite presence and occasional travel may be required based on classified program and government customer needs. In this role, you will: Own the daily personnel security workload from intake through completion, including clearance verification, access nominations, visit requests, onboarding, offboarding, briefings, and reporting actions. Process and track pe

Who we are About Privy Our mission is to make privacy and user ownership the default online. To do so, we build simple, flexible APIs and tools for developers that make it easy to build new products on crypto rails. Privy owns the abstractions and infrastructure layer above wallets, integrating across chains, third-party providers, and Stripe products like Treasury and Link. We get to solve hard technical problems while leveraging Stripe's distribution to reach customers like Ramp, Klarna, Deel, Kraken, Hyperliquid, and Fomo — powering experiences for both mainstream users and crypto natives. Learn more about Privy: Privy and Stripe: Bringing crypto to everyone About the team Engineering at Privy is distinguished by: High urgency: Shipping very small iterations, very fast, to learn very quickly. Product taste: Our customers are developers, and to build effective products for them requires technical knowledge - you will often be "the PM". Security mindset: A great portion of our product is trust. While we have a dedicated security team, every engineer brings security to their designs from the start. In practice, we use boring technology like Node, React, and AWS so we can focus our engineering energy entirely on pushing the boundaries of Privy's core product, e.g. through hardware enclaves, multi-region low latency APIs, and blockchain abstractions that are accessible to mainstream developers. What you’ll do As a Security Engineer at Privy, you will help keep a rapidly growing platform secure through hands-on investigation, operational ownership, and building real code to solve real problems. You’ll work across security operations, incident response, application and infrastructure security, and internal tooling. This is not a role limited to reviewing logs and designs or simply escalating findings. You will carry real ownership for the day-to-day work that protects Privy: investigating anomalies, improving security workflows, and building the automa

About the Team OpenAI’s Cyber team works to make frontier AI safe, trusted, and transformative for developers and enterprises. This team is building the security foundation for Codex: the native controls that govern what Codex can access and do, and the interfaces that allow customers and security partners to inspect, constrain, approve, and respond to Codex activity. Our goal is to make Codex secure by default, governable by enterprises, and interoperable with the security products customers already trust . This extends the existing product direction around tenant-scoped tools, guarded actions, approval systems, and scalable partner interfaces. About the Role We are looking for a deeply technical Product Manager to help build Codex security controls and the partner ecosystem around them. This role focuses on securing Codex itself : how identity, permissions, tools, MCP servers, repositories, secrets, networks, and high-impact actions are governed across Codex products. You will also help define standard interfaces through which authorized customer and partner systems can provide security context, inspect activity, return policy decisions, receive telemetry, and initiate bounded responses. You will work closely with Codex product and engineering, OpenAI Security and Safety, enterprise customers, and partners across application security, identity, cloud security, data security, infrastructure, and security operations. In this Role you Will Build native security controls for Codex Partner with engineering, design, security, and safety teams to develop controls for: Identity, roles, permissions, and tenant isolation. Access to repositories, files, tools, MCP servers, secrets, networks, and infrastructure. Read, write, execute, and deployment authority. Human and policy-based approvals. Prompt-injection and untrusted-content defenses. Audit trails, provenance, stop conditions, revocation, and rollback. Help establish a graduated authority model in which local, read-only

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Physical Security Analyst Overview • Physical security and compliance security officer, maintains and monitors physical security policies, standards, and best practices • Abides by Security guidelines relative to security standards to provide safety and security of staff and assets • Manages Security Control Center Coordinators and security operations. • Manages and administers physical security functions for company facilities to ensure the safety; security and protection of MasterCard employees and asset • Recognizes potential and realized security threats and takes reasonable action to mitigate risk or injuries to personnel and or property • Provides MasterCard Corporate Security Standard Operating Guidelines security supervisors and follows-up to ensure adherence • Manages Security officers by delegating department projects, tasks and assignments • Manages Security staff schedules to ensure proper coverage at all times Role • Interaction with employees and guests, provide direction on security policy and visitor directions as needed • Operational use of security systems • Trains and supervises Security officers with respect to the execution of established physical security policies, programs and procedures • Recommends the development and implementation of physical securi

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role: We’re seeking a Staff Security Detection Engineer to build and mature SoFi’s machine learning–driven detection and anomaly detection program. You will own the detection and model lifecycle end to end; feature engineering, model training, tuning, and validation, operating over large-scale security data lakes and streaming pipelines. You’ll partner closely with our Security Operations Center (SOC), Security Operations Engineering, and Fraud programs to turn high-volume telemetry into high-confidence, low-noise detections at scale. What you’ll do: Design, build, and maintain machine learning models for anomaly detection (unsupervised clustering, time-series and seasonality baselines, isolation forests, autoencoders, risk scoring) with measurable precision/recall targets. Operationalize models and detections from notebook to production, including enrichment, correlation, and response playbook hooks (detection-as-code, CI/CD, model versioning, and rollback). Engineer and tune features from identity, endpoint, network, cloud, SaaS, and application telemetry stored in the security data lake to improve model signal quality. Partner with the SOC to triage, tune, and close detection feedback loops; use analyst dispositions as labels to retrain and improve models, reduce noise, and document runbo

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Staff Security Engineer for our Enterprise Security team. The threats facing modern organizations are evolving at an unprecedented pace — driven by AI, cloud complexity, and an ever-expanding attack surface. Our Enterprise Security team is responsible for protecting Snowflake, our employees, and our customers by designing, implementing, and maintaining robust endpoint security solutions at enterprise scale, defending not just endpoints and identities, but the AI-assisted workflows and intelligent systems that define how the modern enterprise operates. AS A STAFF SECURITY ENGINEER AT SNOWFLAKE, YOU WILL: Develop, maintain, and scale Snowflake's endpoint security solutions while actively contributing to architecture and strategy. This includes EDR, DLP, secure browser, MDM, and AI security solutions across a complex multi-cloud, multi-SaaS enterprise environment. Own the technical roadmap for endpoint security tooling as Snowflake rapidly grows. Build intelligent security platforms and automate security operations using AI and robust software engineering. Identify opportunities to reduce toil, increase detection fidelity, and accelerate response through thoughtful, scalable automation. Monitor security events, investigate incidents, and build real-time detecti

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange™️ platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 160+ public exchanges globally and thousands of private exchanges at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Detection Analyst to join our team. This is a Remote (USA Only) role, reporting to the Detection Analyst Manager in the Detection Operations Team. You will utilize our advanced detection platform to analyze EDR telemetry, alerts, and log sources across key detection domains—including Endpoint, Identity, Network, and Cloud—to identify and publish threats for our Managed Detection and Response customers. By driving projects that improve our workflow through orchestration and automation, you will ensure our customers receive high-fidelity threat analysis and concise, actionable communication regarding emerging threats at scale. What you’ll do (Role Expectations) Analyze EDR telemetry, alerts, and log sources across several detection domains including Endpoint, Identity, Network, and Cloud/SaaS Publish threats for customers using concisely written communication to effectively convey key indica

About the Team The Global Safety and Security team advances DoorDash by protecting people, property, operations, brand, and reputation. Within that team, Protective Services safeguards executives and residences through executive protection, intelligence collection, threat monitoring, residential security, and secure transportation. We manage risk and deliver value through technology and a people-first approach, and we strive to always be ahead of the curve and there for our people, anytime, anywhere. About the Role We are hiring Protective Services Associates to join the Protective Services team, providing residential security coverage and on-site protective presence in support of executives. This is the entry point on our cross-trained career ladder. Associates build proficiency across residential security, monitoring and threat reporting, and close-protection fundamentals, with a structured path to Senior Associate and beyond as you grow. Responsibilities Residential Security Coverage: Provide dedicated, round-the-clock physical security presence at a residential property as part of a rotating shift team. Monitoring & Threat Reporting: Monitor camera systems and access points, document and report security-relevant activity, and hand off findings to the team's intelligence function. Access Control: Screen and coordinate visitors, deliveries, and vendors according to established protocols. Logistics Coordination: Plan and manage the logistics of residential security operations, including scheduling, shift handoffs, and coverage during events or executive travel. Coordinate with drivers and other Protective Services team members to align movements, timing, and coverage. Incident Response: Respond to security incidents or anomalies, following established escalation procedures. Professional Conduct: Serve as a trusted, hands-on point of contact for executives, anticipating needs, exercising sound judgment in real time, and delivering discreet, concierge-level servi