Security Response Officers Jobs

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Senior Software Engineer on the Security EDR Workflows team, you will help design and build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. What You Will Be Doing You’ll design and implement features that power Elastic Defend user interface capabilities. You’ll build and evolve APIs that allow our product to interact with Elastic Defend data. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. You’ll own the reliability, observability and operational health of ou

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role The Security EDR Workflows team is in charge of building core capabilities that power Elastic Defend management experience. Our focus is on delivering policy configuration and management capabilities, Elastic Defend and third party providers response actions as forensics capabilities through OSquery. The team is leading XDR key expansion to our SIEM foundations and enhancing user experience in onboarding and managing our security product. As a Software Engineer on the Security EDR Workflows team, you will help build workflows and user-facing capabilities that get to our Elastic Defend agent to protect and respond against security threats. You’ll collaborate closely with other security engineering teams, as well as with product and design, to deliver robust, high-scale features used by security practitioners around the world. You’ll be using AI to quickly understand and solve problems. What You Will Be Doing You’ll implement features that power Elastic Defend user interface capabilities. You’ll contribute to the architecture of Elastic Defend management and response actions framework along with OSquery forensics capabilities. You’ll develop scalable, high performance systems within the Elastic ecosystem. Write production-grade code in Typescript/Node JS (and potentially other languages) as part of high-quality, well-tested

Here’s a summary of the role: Every enterprise deal reaches the moment where someone in security says “prove it.” You’re the person who answers — quickly, accurately, and with the evidence to back it up. As an Analyst II on our Trust & Assurance team, you’ll own a live queue of security questionnaires, third-party due diligence assessments, RFP security sections and customer assurance requests. You’ll draft at speed using AI-assisted response tooling, then verify every answer against our approved answer library, current SOC 2 and ISO 27001 certifications and the underlying evidence before it leaves your hands. Accuracy is the whole game here: a wrong answer in a customer questionnaire is a commitment we didn’t mean to make. The best part is that you won’t just work the queue — you’ll shrink it. Every recurring question you turn into a published answer on our trust site is a ticket that never comes back. If you’ve spent two to four years in security GRC, compliance, IT audit or customer assurance, you’re precise under volume, and you like being measured on turnaround time and first-pass accuracy, you’ll do well here. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Own a high-volume queue of security questionnaires, due diligence assessments, RFP security sections and assurance requests, delivering accurate responses within SLA. Use AI-assisted response tooling to draft at speed, then verify every answer against the approved answer library, current certifications and underlying evidence before it goes out. Triage and route incoming requests using established playbooks — resolving the routine independently and escalating anything novel, contractual or architecturally complex. Maintain and expand the answer library by adding approved answers, retiring stale ones and flagging inconsistencies, so the same question never has to be researched twice. Build out trust site and customer-facing content, and show commercial teams how to

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. We are seeking an experienced Manager of Security Operations, reporting to the Director of Security, to lead our exceptionally talented Security Engineering team. Vanta’s Security Operations team provides essential security operational services, including configuring, monitoring, and maintaining our security tools and infrastructure. You’ll be responsible for leading the Security Operations team and assisting with incident response, setting our detection and response strategy, and assisting with investigations. You’ll also work cross-functionally to ensure we maintain compliance and improve our secure maturity. What you’ll do as a Manager, Security Operations at Vanta: Lead and grow a team of the best security operations analysts in the world, with a view of security that is AI-first, human-centric, and trust-based. Help define the strategy for Vanta’s security operations team, and empower the team to implement robust security protocols and stay ahead of emerging threats. Leverage AI to improve efficiency of team processes, and improve the maturity of the overall security program. Lead and drive incident response from detection, remediation, to prevention Identify, develop, and implement new processes in our security operations program Identify new technologies and emerging threats for our organization, and plan a technology-driven approach to addressing new risks How to be successful in this role: Strong leadership experience in security and an ability to lead a global team from a foundation of transparency and trust. Strong security operations experience, with emphasis on implementing security controls in a SaaS and cloud env

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. We are seeking an experienced Sr. Manager of Security Operations, reporting to the Director of Security, to lead our exceptionally talented Security Engineering team. Vanta’s Security Operations team provides essential security operational services, including configuring, monitoring, and maintaining our security tools and infrastructure. You’ll be responsible for leading the Security Operations team and assisting with incident response, setting our detection and response strategy, and assisting with investigations. You’ll also work cross-functionally to ensure we maintain compliance and improve our secure maturity. What you’ll do as a Sr. Manager, Security Operations at Vanta: Lead and grow a team of the best security operations analysts in the world, with a view of security that is AI-first, human-centric, and trust-based. Help define the strategy for Vanta’s security operations team, and empower the team to implement robust security protocols and stay ahead of emerging threats. Leverage AI to improve efficiency of team processes, and improve the maturity of the overall security program. Lead and drive incident response from detection, remediation, to prevention Identify, develop, and implement new processes in our security operations program Identify new technologies and emerging threats for our organization, and plan a technology-driven approach to addressing new risks How to be successful in this role: Strong leadership experience in security and an ability to lead a global team from a foundation of transparency and trust. Strong security operations experience, with emphasis on implementing security controls in a SaaS and c

The ISOC Lead is responsible for overseeing the effective functioning of the Integrated Security Operations Center (ISOC). The role focuses on leveraging advanced security technologies, real-time monitoring, and incident response mechanisms to ensure a proactive and comprehensive security framework across the organization. The ISOC Lead coordinates with multiple stakeholders to mitigate risks, enhance operational efficiency, and ensure compliance with established security protocols and regulatory requirements. Source: Adani Group | Job ID: 55436

Role Summary We are seeking an experienced SOC / Security Operations Lead to oversee and strengthen the organization's Security Operations Center (SOC), threat detection, incident response, vulnerability management, data protection, and security monitoring capabilities. The ideal candidate will possess extensive experience in managing enterprise security operations, SIEM/SOAR platforms, threat hunting, incident response, DLP, endpoint security, and vulnerability management programs. The role requires leadership of a multi-functional security operations team responsible for protecting critical business systems, customer data, and digital assets while ensuring compliance with RBI regulations and industry security standards. Key Responsibilities Security Operations Center (SOC) Management -Lead and manage 24x7 Security Operations Center (SOC) functions. -Establish and enhance SOC processes, playbooks, escalation procedures, and operational metrics. -Ensure timely detection, triage, investigation, containment, and remediation of security incidents. -Develop SOC maturity roadmaps aligned with industry best practices and regulatory expectations. -Monitor security KPIs, SLAs, MTTR, MTTD, and incident response effectiveness. SIEM, XSIAM & Threat Detection -Lead implementation, administration, and optimization of: -Palo Alto Cortex XSIAM -SIEM Platforms -SOAR Platforms -UEBA Solutions -Threat Intelligence Platforms -Develop and tune correlation rules, detection logic, and analytics use cases. -Enhance detection coverage across cloud, endpoints, applications, networks, and third-party environments. -Drive threat hunting and proactive security monitoring initiatives. Incident Response & Threat Management -Lead enterprise cyber incident response activities. -Develop and maintain incident response plans, runbooks, and communication procedures. -Coordinate investigations involving malware, ransomware, phishing, insider threats, account compromise, fraud, and adv

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. We are looking for a Security Operations Lead (SOC Lead) to build, mature, and operate our 24/7 detection and response capabilities across a modern cloud-native and AI-driven environment. This role leads the global SOC function—monitoring, SIEM ownership, detection engineering, alert triage, and operational readiness—while also evaluating and integrating emerging AI-based SOC products and autonomous response platforms . You will oversee monitoring across multi-cloud environments (GCP primary, AWS/Azure secondary), Kubernetes, SaaS services, endpoints, developer tools, and AI workloads . You’ll collaborate closely with Cloud Security, Compliance/GRC, SRE, Platform Engineering, IT/Endpoint teams, and AI Infrastructure to ensure our detection strategy scales and stays ahead of evolving threats. This is a hands-on leadership role perfect for someone who wants to shape the SOC of the future while solving complex challenges in a high-scale AI setting. What You’ll Do SOC Leadership & 24/7 Monitoring Lead, mentor, and scale a global SOC team responsible for 24/7 monitoring, alert intake, triage, correlation, and escalation. Build operational rigor: processes, runbooks, SLAs, metrics, and quality standards for high-scale environments. Cover monitoring across: Cloud infrastructure (GCP, AWS, Azure) Kubernetes/GKE/EKS/AKS clusters SaaS platforms (Google Workspace, GitHub, Slack, Okta, etc.) Endpoints (macOS, Linux, Windows) including EDR/XDR telemetry Developer platforms + CI/CD pipelines AI/ML systems and model-serving workflows AI-Based SOC Integration & Innovation Evaluate, adopt, and integrate AI-native SOC technologies for triaging, detection, and correlation Identify opportunities to automate triage, investigations,

The Team: As a Security Engineer 2 on the Cyber Threat Intelligence team, you will help Datadog stay ahead of evolving threats by identifying, analyzing, and operationalizing intelligence on threat actors, campaigns, and emerging threats. Working within Security Engineering, you will partner closely with security teams to translate intelligence into actionable security improvements across the company. You will serve as a subject matter expert on how the cyber threat landscape intersects with Datadog and contribute to intelligence-led decision making during both steady-state operations and active security incidents. This role provides opportunities to influence detection, response, and security strategy through technical analysis, collaboration, and intelligence-driven initiatives. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Develop and maintain tooling that automates the collection, processing, analysis, and dissemination of threat intelligence. Assess emerging vulnerabilities, threat activity, and security events to help stakeholders understand potential impact to Datadog. Conduct threat hunting and infrastructure analysis to identify adversary activity relevant to Datadog and improve defensive controls. Partner with security teams to operationalize intelligence into detections, investigations, and response workflows. Coordinate with information-sharing communities to gather, evaluate, and disseminate actionable intelligence. Produce technical briefings, threat reports, and intelligence products for security and engineering stakeholders. Who You Are: Experienced in writing and presenting operational and technical intelligence for threat detection, response, and security stakeholders. Skilled in partnering with detection and response te

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role: Anthropic sits at the frontier of AI development, which makes us one of the most interesting targets in the world for nation-state and advanced criminal actors. The Threat Intelligence function within our Detection & Response team exists to make sure we see them coming. As a Threat Intelligence Engineer, you'll be a hands-on practitioner responsible for producing the actionable intelligence that drives our detections, hunts, and defensive priorities. You'll track the adversaries most likely to target a frontier AI lab, build the tooling and pipelines that turn raw indicators into operational defenses, and work shoulder-to-shoulder with detection engineers and incident responders to make sure intelligence actually changes outcomes. This is a builder's role on a small, high-leverage team — you'll have broad latitude to shape how threat intelligence is collected, analyzed, and operationalized at Anthropic. Responsibilities: Research, track, and report on threat actors and campaigns targeting AI labs, cloud infrastructure, and the broader technology sector — producing timely, actionable intelligence for Security Engineering stakeholders Build and maintain tooling and automated pipelines to collect, enrich, correlate, and operationalize indicators of compromise into our detection and alerting stack Develop and execute intelligence-driven threat hunts across endpoint, cloud, identity, and SaaS telemetry, and turn findings into durable detections Perform technical analysis of malware, phishing infrastructure, and attacker tooling to extract indicators, TTPs, and attribution signals Partner with Detectio

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role As a Senior Incident Response Analyst at Elastic, you are one of the front-line defenders for ensuring we are delivering safe and secure products and services to our customers, users, and fellow Elasticians. You will be responsible for reviewing and responding to alerts across a wide variety of sources that include multiple cloud providers, CI/CD environments, SaaS services, user workstations, and much more. Elastic is distributed globally by design, and we model our response practice around that same concept; enabling domain experts to respond with oversight from the Incident Response team and relying on you to provide oversight and guidance to these experts. You’ll also dive in and provide support in identifying what happened, who did it, when, and where to ensure we’ve accurately secured our environment during and after security events. If doing all of this with the Elastic Stack excites you, then we’d love to talk with you! What You Will Be Doing Review and respond to alerts generated from our Elastic Detection Engine and other monitoring sources Provide feedback to the Threat Detection team to improve the quality of detections by identifying false positives, enrichment opportunities, and automated response possibilities Conduct analysis on SIEM and/or endpoint logs during complex investigations Develop and document innovativ