The Role

Are you ready to spearhead the Security Operations Team at Moveworks, enabling us to lead and innovate in this space? Is your passion rooted in harnessing cutting-edge technologies in this dynamic landscape, especially with a knack for scalable and automated solutions? If you're up for the challenge of maturing our Security Operations program, then we have an exciting opportunity for you. As a Sr Security Operations Engineer, you will play a critical role in designing, implementing, scaling, and automating our SOC and security systems (i.e. SIEM, DLP, EDR, etc.) You will be responsible for building and driving the strategic direction for Moveworks’ Security Operations and the Blue Team program.

What You Will Do

• Spearhead the strategic development and execution of Moveworks’ Security Operations program
• Ensure that our detections, alerts and response stay up-to-date and properly reflect the risk to our business
• Own and manage security incidents, providing technical leadership and coordination across teams to ensure timely response and resolution
• Drive tabletop and blue vs red team exercises to verify existing playbooks and procedures and identify opportunities for improvement
• Utilize your expertise to stay on top of external threats, including consumption of IOCs
• Define, measure and report key Security Operations metrics
• Develop automated solutions that scale (i.e SIEM, EDR, SOAR, etc)
• Innovate and mature Movework’s Security Operations program
• Coordinate proactive threat-hunting activities to identify and mitigate emerging security risks before they escalate.
  
  

What You Bring To The Table

• 7+ year of experience leading Security Operations program
• 4+ years of work experience in Python, PowerShell, Bash, and/or Java
• Hands-on experience working with SIEM (Security Information Event Management), EDR (Endpoint Detection & Response), DLP (Data Loss Prevention), and SOAR (Security Orchestration and Automation and Response) solutions
• Experience with cloud infrastructure like AWS, GCP, and/or Azure (including Kubernetes) 
• Strong problem-solving abilities and critical thinking skills
• Experience learning from incidents and implementing lessons
• Excellent written and verbal communication skills as well as receptive listening skills, with ability to present complex ideas in a clear, concise fashion to technical and non-technical audiences.
• Ability to teach and mentor others on Security Operations topics
• Ability to combine/search/correlate various log sources to identify potential threats, assess the potential damage, and recommend countermeasures
• Solid experience and the ability to analyze network traffic, endpoint indicators, IOCs.

Compensation Range: $212,000 - $255,000