{ "count" : 124564, "data" : [ { "id" : "6a3089aaf292fd229c094821", "title" : "[8NW] Senior SecOps Incident Response Automation Engineer", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 3.5E7, "max" : 5.0E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior SecOps Incident Response Automation Engineer in San José, Costa Rica, adjusted for the FinTech industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "timestamp" : "2026-06-16T10:11:45.575", "fingerprint" : "65df1f71ef24fcafefd9c420b9edd4eb5708b68d7f9ce438053fd226a38910ba", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132277150--8nw-senior-secops-incident-response-automation-engineer-", "externalId" : "744000132277150", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SOAR, SIEM, APIs, Python, Panther SIEM", "professionalSkills" : [ "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation" ], "hardSkillsList" : [ "SOAR automation", "Incident response workflows", "API integrations", "Scripting for automation" ], "softSkillsList" : [ "Negotiation" ], "hardSkills" : [ { "name" : "SOAR automation", "level" : "intermediate" }, { "name" : "Incident response workflows", "level" : "intermediate" }, { "name" : "API integrations", "level" : "intermediate" }, { "name" : "Scripting for automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" } ], "majorSkills" : "Incident Response Automation, SOAR Platform Development, Security Operations", "majorSkillsList" : [ "Incident Response Automation", "SOAR Platform Development", "Security Operations" ], "coreResponsibilities" : "Build SOAR automated response platform, Maintain SOAR automated response platform, Support AI-enabled response, Route escalations to personnel, Build automated SOC response tools, Build automation programs, Build incident response workflows, Perform Security team tasks, Support on-call response team, Respond to security incidents", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "Fintech industry; Regulated industry environment; SOC response; SIEM; SOAR; APIs; AI/LLM response automation; DLP design; DLP tuning", "domainList" : [ "fintech-industry", "regulated-industry-environment", "soc-response", "siem", "soar", "apis", "ai-llm-response-automation", "dlp-design", "dlp-tuning" ], "domainSpecificKnowledge" : [ "Fintech industry", "Regulated industry environment", "SOC response", "SIEM", "SOAR", "APIs", "AI/LLM response automation", "DLP design", "DLP tuning" ], "toolProficiency" : [ "Torq", "Tines", "Google Sheets", "Excel" ], "communicationSkills" : "English fluency; Effective communication", "continuousLearning" : "Desire to learn AI/LLM", "problemSolvingSkills" : "Identify problems; Assess problems; Tackle problems", "specialRequirements" : "On-call response team support, Occasional off-hours support", "qualificationsBasic" : "Excellent English fluency/proficiency, SOC response experience, Experience in a fintech industry, Experience in a highly regulated industry, Experience working in a lean team, Experience working in a fast-paced technical environment, Experience designing SIEM findings, Experience implementing SIEM findings, Experience tuning SIEM findings, Experience designing SOAR findings, Experience implementing SOAR findings, Experience tuning SOAR findings, Experience configuring advanced automations, Experience with APIs, Understanding of APIs, API integrations experience, Ability to set up API connections, Using APIs to access/retrieve data, Experience with scripting for automation, Experience in data management, Experience in data manipulation, Experience in data presentation", "qualificationsPreferred" : "Python for scripting experience, AI/LLM response automation experience, DLP design experience, DLP tuning experience, Panther SIEM experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates located in Latam to fill the role of Sr. SecOps Incident Response Automation Engineer. In addition to a competitive salary rate and a positive work environment, committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars About the role: Our client develops digital experiences and platforms that provide consumers with information about financial services and financial products, to help them make the best financial decisions for their unique needs. We are looking for a Senior SecOps Incident Response Automation Engineer to support the client's new, greenfield projects, and build an incident response automation program using Torq (or similar SOAR tools), manage escalations, build incident response workflows, write playbooks, and automate a wide range of manual processes. The role is part of a new team and program being built from the ground up. The role provides plenty of autonomy, and the client is looking for someone who is a high driver who is biased to take action and able to identify, assess, and tackle problems that are sometimes ambiguous. They are looking for a proactive individual with great communication skills who enjoys taking on ownership of tasks and challenges. ## Qualifications Role Responsibilities: * Help build and maintain a new SOAR automated response platform using Torq, that supports AI-enabled response and escalations to be routed to on-call personnel at appropriate times. * Build automated SOC response tools, automation programs, incident response workflows, etc. * Perform various Security team tasks as needed. * Be available to support the on-call response team, occasionally on an “as needed” basis during off-hours to respond to potential security incidents. Required Skills & Qualities: * Communication and Negotiation - excellent English fluency/proficiency is required, and candidates must be able to communicate effectively to technical and non-technical stakeholders. * SOC response experience (ideally with experience in a fintech industry or another highly regulated industry environment) * Experience working as part of a lean team in a fast-paced technical environment or organization. * Experience designing, implementing, and tuning SIEM and SOAR findings, including experience configuring advanced automations with cutting-edge tools like Torq, Tines, or similar. * Experience in data retrieval, data manipulation, and data reporting, including the following skills: * Experience working with APIs (at a minimum, having a strong understanding of APIs, API integrations, the ability to set up API connections, and using APIs to access/retrieve data). * Experience with scripting for automation * Experience in data management, manipulation, and presentation (using data in Google Sheets, Excel, and databases). Control work areas: * 90% SOC/SIEM/SOAR automation development * 5% Join the on-call response team * 5% Other ## Additional Information Nice to have: * Experience using Python for scripting * Experience with AI/LLM response automation within the area of SOC response, or at minimum, a desire and willingness to learn * Experience with DLP design and tuning * Experience with Panther SIEM", "summaryDescription" : "[8NW] Senior SecOps Incident Response Automation Engineer at Software Mind. Skills: Incident Response Automation, SOAR Platform Development, Security Operations. Build SOAR automated response platform. Maintain SOAR automated response platform", "postedDate" : "2026-06-15T19:59:33.000", "createdAt" : "2026-06-16T01:45:15.499", "lastUpdated" : "2026-06-16T10:11:45.575", "ingestTimestamp" : "2026-06-16T01:45:15.499", "mongoId" : "6a3089aaf292fd229c094821", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "SOAR automation", "Incident response workflows", "API integrations", "Scripting for automation", "Negotiation", "Incident Response Automation", "SOAR Platform Development", "Security Operations", "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation", "Fintech industry", "Regulated industry environment", "SOC response", "SIEM", "SOAR", "APIs", "AI/LLM response automation", "DLP design", "DLP tuning", "Torq", "Tines", "Google Sheets", "Excel" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 3042.0862, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3060ccf292fd229cf93a10", "title" : "[8NW] Senior SecOps Incident Response Automation Engineer", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 3.25E7, "max" : 4.55E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior SecOps Incident Response Automation Engineer in San José, Costa Rica, adjusted for the FinTech industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "timestamp" : "2026-06-16T13:03:37.150", "fingerprint" : "76d028ed9af96dea94a9ff7e0eb7d88b281ee92b2753cad916513ae94d7f099c", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132277150--8nw-senior-secops-incident-response-automation-engineer-", "externalId" : "744000132277150", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SOAR, SIEM, APIs, Python, Panther SIEM", "professionalSkills" : [ "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation" ], "hardSkillsList" : [ "Scripting for automation", "API integrations" ], "softSkillsList" : [ "Negotiation" ], "hardSkills" : [ { "name" : "Scripting for automation", "level" : "intermediate" }, { "name" : "API integrations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" } ], "majorSkills" : "Incident Response Automation, SOAR Platform Development, SIEM Tuning", "majorSkillsList" : [ "Incident Response Automation", "SOAR Platform Development", "SIEM Tuning" ], "coreResponsibilities" : "Build SOAR automated response platform, Maintain SOAR automated response platform, Support AI-enabled response, Route escalations to on-call personnel, Build automated SOC response tools, Build automation programs, Build incident response workflows, Perform Security team tasks, Support on-call response team, Respond to security incidents", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "Fintech industry; Regulated industry environment", "domainList" : [ "fintech-industry", "regulated-industry-environment" ], "domainSpecificKnowledge" : [ "Fintech industry", "Regulated industry environment" ], "toolProficiency" : [ "Torq", "Tines", "Google Sheets", "Excel" ], "communicationSkills" : "English fluency", "problemSolvingSkills" : "Identify problems; Assess problems; Tackle problems", "specialRequirements" : "On-call response team support, Off-hours support", "qualificationsBasic" : "Excellent English fluency/proficiency, SOC response experience, Experience in a fintech industry, Experience in a highly regulated industry, Experience working in a lean team, Experience working in a fast-paced technical environment, Experience designing SIEM findings, Experience implementing SIEM findings, Experience tuning SIEM findings, Experience designing SOAR findings, Experience implementing SOAR findings, Experience tuning SOAR findings, Experience configuring advanced automations, Experience with APIs, Understanding of APIs, API integrations experience, Ability to set up API connections, Using APIs to access/retrieve data, Experience with scripting for automation, Experience in data management, Experience in data manipulation, Experience in data presentation, Experience using data in Google Sheets, Experience using data in Excel, Experience using data in databases", "qualificationsPreferred" : "Experience using Python for scripting, Experience with AI/LLM response automation, Desire and willingness to learn AI/LLM, Experience with DLP design, Experience with DLP tuning, Experience with Panther SIEM", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates located in Latam to fill the role of Sr. SecOps Incident Response Automation Engineer. In addition to a competitive salary rate and a positive work environment, committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars About the role: Our client develops digital experiences and platforms that provide consumers with information about financial services and financial products, to help them make the best financial decisions for their unique needs. We are looking for a Senior SecOps Incident Response Automation Engineer to support the client's new, greenfield projects, and build an incident response automation program using Torq (or similar SOAR tools), manage escalations, build incident response workflows, write playbooks, and automate a wide range of manual processes. The role is part of a new team and program being built from the ground up. The role provides plenty of autonomy, and the client is looking for someone who is a high driver who is biased to take action and able to identify, assess, and tackle problems that are sometimes ambiguous. They are looking for a proactive individual with great communication skills who enjoys taking on ownership of tasks and challenges. ## Qualifications Role Responsibilities: * Help build and maintain a new SOAR automated response platform using Torq, that supports AI-enabled response and escalations to be routed to on-call personnel at appropriate times. * Build automated SOC response tools, automation programs, incident response workflows, etc. * Perform various Security team tasks as needed. * Be available to support the on-call response team, occasionally on an “as needed” basis during off-hours to respond to potential security incidents. Required Skills & Qualities: * Communication and Negotiation - excellent English fluency/proficiency is required, and candidates must be able to communicate effectively to technical and non-technical stakeholders. * SOC response experience (ideally with experience in a fintech industry or another highly regulated industry environment) * Experience working as part of a lean team in a fast-paced technical environment or organization. * Experience designing, implementing, and tuning SIEM and SOAR findings, including experience configuring advanced automations with cutting-edge tools like Torq, Tines, or similar. * Experience in data retrieval, data manipulation, and data reporting, including the following skills: * Experience working with APIs (at a minimum, having a strong understanding of APIs, API integrations, the ability to set up API connections, and using APIs to access/retrieve data). * Experience with scripting for automation * Experience in data management, manipulation, and presentation (using data in Google Sheets, Excel, and databases). Control work areas: * 90% SOC/SIEM/SOAR automation development * 5% Join the on-call response team * 5% Other ## Additional Information Nice to have: * Experience using Python for scripting * Experience with AI/LLM response automation within the area of SOC response, or at minimum, a desire and willingness to learn * Experience with DLP design and tuning * Experience with Panther SIEM", "summaryDescription" : "[8NW] Senior SecOps Incident Response Automation Engineer at Software Mind. Skills: Incident Response Automation, SOAR Platform Development, SIEM Tuning. Build SOAR automated response platform. Maintain SOAR automated response platform", "postedDate" : "2026-06-15T19:59:33.000", "createdAt" : "2026-06-16T00:16:53.445", "lastUpdated" : "2026-06-16T13:03:37.150", "ingestTimestamp" : "2026-06-16T00:16:53.445", "mongoId" : "6a3060ccf292fd229cf93a10", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Scripting for automation", "API integrations", "Negotiation", "Incident Response Automation", "SOAR Platform Development", "SIEM Tuning", "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation", "Fintech industry", "Regulated industry environment", "Torq", "Tines", "Google Sheets", "Excel" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 3042.0862, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cad9574d8ee00a09d2f3b", "title" : "[8NW] Senior SecOps Incident Response Automation Engineer", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 3.5E7, "max" : 5.5E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior SecOps Incident Response Automation Engineer in San José, Costa Rica, adjusted for the FinTech industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "timestamp" : "2026-06-15T03:27:45.906", "fingerprint" : "0cb0bc990483f2d39ebdbaccb952e4c66b52e0349a42e4cdb31c0335782d463f", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000131889661--8nw-senior-secops-incident-response-automation-engineer-", "externalId" : "744000131889661", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SOAR, SIEM, APIs, Python", "professionalSkills" : [ "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data presentation" ], "hardSkillsList" : [ "API integrations", "Scripting for automation", "Google Sheets", "Excel", "Databases" ], "softSkillsList" : [ "Negotiation" ], "hardSkills" : [ { "name" : "API integrations", "level" : "intermediate" }, { "name" : "Scripting for automation", "level" : "intermediate" }, { "name" : "Google Sheets", "level" : "intermediate" }, { "name" : "Excel", "level" : "intermediate" }, { "name" : "Databases", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" } ], "majorSkills" : "Incident Response Automation, SOAR, SIEM, Automation Development", "majorSkillsList" : [ "Incident Response Automation", "SOAR", "SIEM", "Automation Development" ], "coreResponsibilities" : "Build SOAR platform, Maintain SOAR platform, Support AI-enabled response, Route escalations, Build automated SOC tools, Build automation programs, Build incident response workflows, Perform Security team tasks, Support on-call response team", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders; On-call response team", "domainKnowledge" : "Fintech industry; Regulated industry; SOC response; SIEM; SOAR; AI-enabled response; DLP design", "domainList" : [ "fintech-industry", "regulated-industry", "soc-response", "siem", "soar", "ai-enabled-response", "dlp-design" ], "domainSpecificKnowledge" : [ "Fintech industry", "Regulated industry", "SOC response", "SIEM", "SOAR", "AI-enabled response", "DLP design" ], "toolProficiency" : [ "Torq", "Tines", "Google Sheets", "Excel" ], "communicationSkills" : "English fluency; Communicate effectively", "continuousLearning" : "Learn AI/LLM automation", "problemSolvingSkills" : "Identify problems; Assess problems; Tackle problems", "specialRequirements" : "On-call response, Off-hours support", "qualificationsBasic" : "Excellent English fluency, SOC response experience, Experience with APIs, Experience with scripting, Experience in data management", "qualificationsPreferred" : "Experience in fintech industry, Experience in regulated industry, Experience with Python for scripting, Experience with AI/LLM response automation, Experience with DLP design, Experience with Panther SIEM", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates located in Latam to fill the role of Sr. SecOps Incident Response Automation Engineer. In addition to a competitive salary rate and a positive work environment, committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars About the role: Our client develops digital experiences and platforms that provide consumers with information about financial services and financial products, to help them make the best financial decisions for their unique needs. We are looking for a Senior SecOps Incident Response Automation Engineer to support the client's new, greenfield projects, and build an incident response automation program using Torq (or similar SOAR tools), manage escalations, build incident response workflows, write playbooks, and automate a wide range of manual processes. The role is part of a new team and program being built from the ground up. The role provides plenty of autonomy, and the client is looking for someone who is a high driver who is biased to take action and able to identify, assess, and tackle problems that are sometimes ambiguous. They are looking for a proactive individual with great communication skills who enjoys taking on ownership of tasks and challenges. ## Qualifications Role Responsibilities: * Help build and maintain a new SOAR automated response platform using Torq, that supports AI-enabled response and escalations to be routed to on-call personnel at appropriate times. * Build automated SOC response tools, automation programs, incident response workflows, etc. * Perform various Security team tasks as needed. * Be available to support the on-call response team, occasionally on an “as needed” basis during off-hours to respond to potential security incidents. Required Skills & Qualities: * Communication and Negotiation - excellent English fluency/proficiency is required, and candidates must be able to communicate effectively to technical and non-technical stakeholders. * SOC response experience (ideally with experience in a fintech industry or another highly regulated industry environment) * Experience working as part of a lean team in a fast-paced technical environment or organization. * Experience designing, implementing, and tuning SIEM and SOAR findings, including experience configuring advanced automations with cutting-edge tools like Torq, Tines, or similar. * Experience in data retrieval, data manipulation, and data reporting, including the following skills: * Experience working with APIs (at a minimum, having a strong understanding of APIs, API integrations, the ability to set up API connections, and using APIs to access/retrieve data). * Experience with scripting for automation * Experience in data management, manipulation, and presentation (using data in Google Sheets, Excel, and databases). Control work areas: * 90% SOC/SIEM/SOAR automation development * 5% Join the on-call response team * 5% Other ## Additional Information Nice to have: * Experience using Python for scripting * Experience with AI/LLM response automation within the area of SOC response, or at minimum, a desire and willingness to learn * Experience with DLP design and tuning * Experience with Panther SIEM", "summaryDescription" : "[8NW] Senior SecOps Incident Response Automation Engineer at Software Mind. Skills: Incident Response Automation, SOAR, SIEM, Automation Development. Build SOAR platform. Maintain SOAR platform", "postedDate" : "2026-06-12T12:31:33.000", "createdAt" : "2026-06-13T22:30:03.454", "lastUpdated" : "2026-06-15T03:27:45.906", "ingestTimestamp" : "2026-06-13T22:30:03.454", "mongoId" : "6a2cad9574d8ee00a09d2f3b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "API integrations", "Scripting for automation", "Google Sheets", "Excel", "Databases", "Negotiation", "Incident Response Automation", "SOAR", "SIEM", "Automation Development", "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data presentation", "Fintech industry", "Regulated industry", "SOC response", "AI-enabled response", "DLP design", "Torq", "Tines" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1990.0459, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c9def74d8ee00a099d1f0", "title" : "[8NW] Senior SecOps Incident Response Automation Engineer", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 3.5E7, "max" : 5.5E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior SecOps Incident Response Automation Engineer in San José, Costa Rica, adjusted for the FinTech industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "timestamp" : "2026-06-15T08:56:26.782", "fingerprint" : "5ffd1f23307dc4070609d77ee63358d0b29af86091c01ca8cc6f41993be3c213", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000131889661--8nw-senior-secops-incident-response-automation-engineer-", "externalId" : "744000131889661", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SOAR, SIEM, APIs, Python", "professionalSkills" : [ "Automation development", "Data retrieval", "Data manipulation", "Data reporting", "API integrations", "Data management", "Data presentation" ], "hardSkillsList" : [ "Incident response workflows", "Playbooks", "Automate manual processes", "Scripting for automation", "API connections" ], "softSkillsList" : [ "Negotiation" ], "hardSkills" : [ { "name" : "Incident response workflows", "level" : "intermediate" }, { "name" : "Playbooks", "level" : "intermediate" }, { "name" : "Automate manual processes", "level" : "intermediate" }, { "name" : "Scripting for automation", "level" : "intermediate" }, { "name" : "API connections", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" } ], "majorSkills" : "Incident Response, Automation, SOAR, SIEM", "majorSkillsList" : [ "Incident Response", "Automation", "SOAR", "SIEM" ], "coreResponsibilities" : "Build and maintain SOAR automated response platform, Support AI-enabled response, Route escalations to on-call personnel, Build automated SOC response tools, Build automation programs, Build incident response workflows, Perform Security team tasks, Support on-call response team", "teamCollaboration" : "On-call response team; Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "Fintech industry; Regulated industry environment; SOC response; AI-enabled response; DLP design", "domainList" : [ "fintech-industry", "regulated-industry-environment", "soc-response", "ai-enabled-response", "dlp-design" ], "domainSpecificKnowledge" : [ "Fintech industry", "Regulated industry environment", "SOC response", "AI-enabled response", "DLP design" ], "toolProficiency" : [ "Torq", "Tines", "Google Sheets", "Excel" ], "communicationSkills" : "Communicate effectively", "continuousLearning" : "Desire and willingness to learn AI/LLM", "problemSolvingSkills" : "Identify problems; Assess problems; Tackle problems", "specialRequirements" : "On-call response, Off-hours support", "qualificationsBasic" : "Excellent English fluency, SOC response experience, Experience working as part of a lean team, Experience designing, implementing, and tuning SIEM and SOAR findings, Experience configuring advanced automations, Experience working with APIs, Experience with scripting for automation, Experience in data management, manipulation, and presentation", "qualificationsPreferred" : "Experience using Python for scripting, Experience with AI/LLM response automation, Experience with DLP design and tuning, Experience with Panther SIEM", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates located in Latam to fill the role of Sr. SecOps Incident Response Automation Engineer. In addition to a competitive salary rate and a positive work environment, committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars About the role: Our client develops digital experiences and platforms that provide consumers with information about financial services and financial products, to help them make the best financial decisions for their unique needs. We are looking for a Senior SecOps Incident Response Automation Engineer to support the client's new, greenfield projects, and build an incident response automation program using Torq (or similar SOAR tools), manage escalations, build incident response workflows, write playbooks, and automate a wide range of manual processes. The role is part of a new team and program being built from the ground up. The role provides plenty of autonomy, and the client is looking for someone who is a high driver who is biased to take action and able to identify, assess, and tackle problems that are sometimes ambiguous. They are looking for a proactive individual with great communication skills who enjoys taking on ownership of tasks and challenges. ## Qualifications Role Responsibilities: * Help build and maintain a new SOAR automated response platform using Torq, that supports AI-enabled response and escalations to be routed to on-call personnel at appropriate times. * Build automated SOC response tools, automation programs, incident response workflows, etc. * Perform various Security team tasks as needed. * Be available to support the on-call response team, occasionally on an “as needed” basis during off-hours to respond to potential security incidents. Required Skills & Qualities: * Communication and Negotiation - excellent English fluency/proficiency is required, and candidates must be able to communicate effectively to technical and non-technical stakeholders. * SOC response experience (ideally with experience in a fintech industry or another highly regulated industry environment) * Experience working as part of a lean team in a fast-paced technical environment or organization. * Experience designing, implementing, and tuning SIEM and SOAR findings, including experience configuring advanced automations with cutting-edge tools like Torq, Tines, or similar. * Experience in data retrieval, data manipulation, and data reporting, including the following skills: * Experience working with APIs (at a minimum, having a strong understanding of APIs, API integrations, the ability to set up API connections, and using APIs to access/retrieve data). * Experience with scripting for automation * Experience in data management, manipulation, and presentation (using data in Google Sheets, Excel, and databases). Control work areas: * 90% SOC/SIEM/SOAR automation development * 5% Join the on-call response team * 5% Other ## Additional Information Nice to have: * Experience using Python for scripting * Experience with AI/LLM response automation within the area of SOC response, or at minimum, a desire and willingness to learn * Experience with DLP design and tuning * Experience with Panther SIEM", "summaryDescription" : "[8NW] Senior SecOps Incident Response Automation Engineer at Software Mind. Skills: Incident Response, Automation, SOAR, SIEM. Build and maintain SOAR automated response platform. Support AI-enabled response", "postedDate" : "2026-06-12T12:31:33.000", "createdAt" : "2026-06-14T02:42:40.717", "lastUpdated" : "2026-06-15T08:56:26.782", "ingestTimestamp" : "2026-06-14T02:42:40.717", "mongoId" : "6a2c9def74d8ee00a099d1f0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response workflows", "Playbooks", "Automate manual processes", "Scripting for automation", "API connections", "Negotiation", "Incident Response", "Automation", "SOAR", "SIEM", "Automation development", "Data retrieval", "Data manipulation", "Data reporting", "API integrations", "Data management", "Data presentation", "Fintech industry", "Regulated industry environment", "SOC response", "AI-enabled response", "DLP design", "Torq", "Tines", "Google Sheets", "Excel" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1986.7883, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306fd5f292fd229cfed7df", "title" : "Security Incident Response Manager", "company" : "Stripe", "industry" : "FinTech", "salary" : { "min" : 110000.0, "max" : 150000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Manager-level Security Incident Response Manager in the FinTech industry in Ireland, adjusted for seniority and company size." }, "location" : "Ireland Locations", "locations" : [ "Ireland Locations" ], "timestamp" : "2026-06-16T11:17:32.753", "fingerprint" : "5f1795380bd689254fa4ec13a24c81721330e837ac870f097537d3dd799086da", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://stripe.com/jobs/search?gh_jid=8007205", "externalId" : "8007205", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ireland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Ireland", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Python, SQL, MacOS, Linux, Windows", "professionalSkills" : [ "Security management", "Data analytics", "Network security", "Digital forensics", "Incident response", "Threat intelligence", "Data processing", "Data analysis" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response Management, Security Operations, Team Leadership, Threat Analysis", "majorSkillsList" : [ "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis" ], "coreResponsibilities" : "Leverage security management experience, Improve incident response capabilities, Manage team of security analysts, Manage investigators, Manage responders, Hire team members, Train team members, Evaluate team performance, Provide technical guidance, Develop response procedures, Ensure timely resolution of casework, Collaborate with internal stakeholders, Make continuous improvements to incident response function, Lead team of security analysts, Support team of security analysts, Triage threats, Assess threats, Respond to threats, Provide technical guidance to team, Influence organizational mission, Influence organizational vision, Ensure prioritization of project work, Ensure delivery of project work, Align project work with security roadmaps, Strengthen KPIs for response operations, Strengthen metrics for response operations, Provide clear reporting to stakeholders, Provide consistent reporting to stakeholders, Work cross-functionally with security engineering teams, Gather requirements for analyzing security events data, Gather requirements for responding to security events data, Protect Stripe networks, Protect Stripe systems, Protect Stripe data, Develop strategies for incident response, Document strategies for incident response, Implement strategies for incident response, Develop runbooks for incident response, Document runbooks for incident response, Implement runbooks for incident response, Develop capabilities for incident response, Document capabilities for incident response, Implement capabilities for incident response, Continuously improve security processes, Continuously improve response capabilities, Collaborate with security engineers, Collaborate with security analysts, Coach individual contributors, Mentor individual contributors, Enable career development, Champion quality standards within team", "teamCollaboration" : "Cross-functional teams; Security Analytics teams; Detection teams; Security engineering teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Threat actor tactics; Threat actor techniques; Threat actor procedures; Security incident response; Network security; Digital forensics; Data analytics", "domainList" : [ "threat-actor-tactics", "threat-actor-techniques", "threat-actor-procedures", "security-incident-response", "network-security", "digital-forensics", "data-analytics" ], "domainSpecificKnowledge" : [ "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Network security", "Digital forensics", "Data analytics" ], "toolProficiency" : [ "Chronicle", "Tines", "Osquery", "Splunk" ], "communicationSkills" : "Operational reporting; Incident reporting", "documentationSkills" : "Response procedures; Runbooks", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Ensure timely and effective resolution of casework", "qualificationsBasic" : "5+ years leading Security Operations or Incident Response teams, Hands-on, technical management experience, B.S. or M.S. Computer Science or related field, Equivalent experience in Security, Experience recruiting, growing, and leading technical teams, Performance management experience, Excellent written and verbal communication skills, Ability to develop and deliver operational or incident-related information to leadership, Advanced knowledge of data analytics, Advanced knowledge of network security, Advanced knowledge of digital forensics, Advanced knowledge of incident response investigations, Experience with Python, Experience with SQL, Familiarity with macOS, Familiarity with Linux, Familiarity with Windows, Understanding of threat actor TTPs", "qualificationsPreferred" : "Broad knowledge across information security domain, Familiarity with endpoint security, Familiarity with email security, Familiarity with network security, Familiarity with identity management, Familiarity with cloud security, Familiarity with vulnerability management, Familiarity with incident response, Familiarity with threat intelligence, Experience with engineering, Experience with data processing and analysis tools, Familiarity with network observability, Familiarity with security software, Familiarity with data engineering solutions, Familiarity with Chronicle, Familiarity with Tines, Familiarity with osquery, Familiarity with Splunk", "remoteFriendly" : true, "rawDescription" : "Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Security Incident Response team is responsible for triaging and assessing the severity of incoming security alerts, responding with initial containment measures and escalating as needed to incident responders for further investigation and resolution. They analyze a variety of data sources to identify potential threats, collect requirements for operational enhancements to detection and response systems, and generally scale security processes. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed globally and regularly coordinates with stakeholders in North America, Europe, and Asia. What you’ll do You will leverage your security management experience to improve incident response capabilities at Stripe. You will manage a team of security analysts, investigators, and responders on the front lines of the incident response process, hiring, training, and evaluating their performance, providing technical guidance where needed, developing clear and consistent response procedures, and ensuring timely and effective resolution of casework. You will also collaborate with various internal stakeholders, including the Security Analytics and Detection teams, and make continuous improvements to Stripe’s security incident response function. Responsibilities Lead and support a team of security analysts, investigators, and responders who triage, assess, and respond to threats Provide technical guidance to the team, as a subject matter expert Influence the organizational mission and vision by ensuring prioritization and delivery of project work that is aligned with relevant security roadmaps Strengthen KPIs and metrics for measuring response operations effectiveness, for clear and consistent reporting to internal stakeholders Work cross-functionally with security engineering teams to gather requirements for analyzing and responding to security events data at scale while protecting Stripe networks, systems, and data from threats Develop, document, and implement strategies, runbooks, and capabilities to support the incident response process Continuously improve security processes and response capabilities by collaborating with security engineers and analysts Coach and mentor individual contributors, enabling career development and championing quality standards within the team Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements 5+ years experience leading Security Operations or Incident Response teams, including hands-on, technical management experience of security analysts or engineers B. S. or M. S. Computer Science or related field, or equivalent experience in Security Experience recruiting, growing, and leading technical teams, including performance management Excellent written and verbal communication skills, including the ability to develop and deliver operational or incident-related information to leadership Advanced knowledge of data analytics (e. g. logs for first or third party applications, system / data access events), network security, digital forensics, and incident response investigations Experience with Python and SQL, and/or familiarity with other programming languages Familiarity with operating systems, file systems, and memory on macOS, Linux, or Windows Strong understanding of threat actor tactics, techniques, and procedures (TTPs) Preferred qualifications Broad knowledge and experience across the information security domain, including familiarity with endpoint, email, network, identity management, cloud security, vulnerability management, incident response, and threat intelligence. Experience with engineering, data processing and analysis tools Familiarity with network observability, security software, or data engineering solutions (Chronicle, Tines, osquery, Splunk, etc.)", "summaryDescription" : "Security Incident Response Manager at Stripe. Skills: Incident Response Management, Security Operations, Team Leadership, Threat Analysis. Leverage security management experience. Improve incident response capabilities", "postedDate" : "2026-06-16T01:16:18.624", "createdAt" : "2026-06-16T01:16:18.624", "lastUpdated" : "2026-06-16T11:17:32.753", "ingestTimestamp" : "2026-06-16T01:16:18.624", "mongoId" : "6a306fd5f292fd229cfed7df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration", "Leadership", "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis", "Security management", "Data analytics", "Digital forensics", "Threat intelligence", "Data processing", "Roadmap planning", "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Chronicle", "Tines", "Osquery", "Splunk" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 987.45386, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "68b706967fc9a711f0f6f106", "title" : "Senior Security Incident Response Engineer", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:15:22.523", "fingerprint" : "557fc71c43f8425ad3ede7e1896c755a137ec1863b4d9868b798c7018c19161b", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3054814/apply", "externalId" : "9b21d22c-d0c3-4bd6-9b1b-3f576fbb97c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Malware analysis, Forensics, Security operations, Incident response, Security automation, Cloud computing, AWS", "professionalSkills" : [ "Security engineering", "Threat landscape", "Security automation tooling" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention" ], "softSkillsList" : [ "Creative problem solving", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Programmatic automation", "level" : "intermediate" }, { "name" : "Security issue prevention", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creative problem solving" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security automation, Cloud security", "majorSkillsList" : [ "Incident response", "Security automation", "Cloud security" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities, Design and build tooling, Enable programmatic automation, Lead security engineer, Provide security guidance, Provide technical guidance, Influence process and priorities, Improve security outcomes, Provide strategic guidance, Bar raise security issues, Escalate security issues, Identify prevention opportunities, Mentor junior engineers, Develop junior engineers", "teamCollaboration" : "Global team environment; Multiple security teams; Cross-functional teams", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider security", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider-security" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider security" ], "toolProficiency" : [ "SOAR platforms", "SIEM platforms" ], "communicationSkills" : "Oral communication; Written communication", "continuousLearning" : "Learning about security domains", "innovationCreativity" : "Creative problem solving", "problemSolvingSkills" : "Creative problem solving; Critical problem solving", "outcomesObjectives" : "Improve security outcomes", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 7+ years systems/network/application security, 5+ years on Security team, 1 year programming/scripting language, Experience leading junior engineers", "qualificationsPreferred" : "Excellent written/verbal communication, 7+ years security response/automation/threat intelligence, Malware analysis experience, Forensics experience, SOAR platforms experience, SIEM platforms experience, Experience with MS Windows, Linux, MacOS, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services team is looking for a passionate Senior Security Incident Response Engineer who can lead the response to security issues across the largest cloud provider in the world. You must thrive in dynamic/ambiguous situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! You’ll apply your creative and critical problem solving skills to quickly design and build tooling that enables programmatic automation at a massive scale. You must have a passion for engineering solutions to complex security challenges, and recognize and fill gaps in capabilities. Above all, you should be passionate about information security, the threat landscape and security automation and tooling. Key job responsibilities - Work across multiple security teams as a lead security engineer providing security and technical guidance. - Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes - Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications - Bar raise security issues and escalate appropriately - Identify opportunities to prevent security issues at scale - Mentor and develop teammates both technically and professionally About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. - 7+ years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 5+ years experience on a Security team, especially experience coordinating responses to security incidents. - 1 year proficiency with one high-level programming or scripting language. - Experience leading and coaching junior security engineers to improve their skills and effectiveness Preferred Qualifications: - Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences. - 7+ years experience working in security response, security automation tooling, or threat intelligence. - Experience with malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS) - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Security Incident Response Engineer at Amazon.com Services LLC. Skills: Incident response, Security automation, Cloud security. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T10:52:46.897", "createdAt" : "2026-06-13T10:52:46.897", "lastUpdated" : "2026-06-15T03:15:22.523", "ingestTimestamp" : "2026-06-13T10:52:46.897", "mongoId" : "68b706967fc9a711f0f6f106", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3054814/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention", "Creative problem solving", "Critical thinking", "Incident response", "Security automation", "Cloud security", "Security engineering", "Threat landscape", "Security automation tooling", "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Cloud provider security", "SOAR platforms", "SIEM platforms" ], "skillCount" : 23, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 967.1215, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a25145474d8ee00a00bb3b2", "title" : "Senior Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services Japan GK", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 1.2E7, "max" : 1.8E7, "currency" : "JPY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer in Tokyo, Japan, adjusted for AWS's size and the technology industry." }, "location" : "Tokyo, JPN", "locations" : [ "Tokyo, JPN" ], "certifications" : [ "GCIH", "GSEC", "GREM", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T08:24:56.602", "fingerprint" : "a57d3db022abec12088d7bb9660b2ed2ff73f018f6b5050988fd19a160c05a1a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "externalId" : "79b6888c-343c-4289-bbab-a95d6a41e1f2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tokyo", "country" : "Japan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "35.6768601,139.7638947" } ], "locationText" : "Tokyo, Japan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Java, C++, AWS, Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM", "professionalSkills" : [ "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations" ], "hardSkillsList" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Programming", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Command line tools", "level" : "intermediate" }, { "name" : "Security issue identification", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Mitigation planning", "level" : "intermediate" }, { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Attack pattern analysis", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security Incident Response, Automation, AI Feedback Loops, Detection Engineering", "majorSkillsList" : [ "Security Incident Response", "Automation", "AI Feedback Loops", "Detection Engineering" ], "coreResponsibilities" : "Build automation mechanisms, Investigate complex security incidents, Build frameworks for scalable detection, Build frameworks for auto-remediation, Architect AI feedback loops, Respond to threats, Build detection enhancements, Build auto-remediation playbooks, Build AI training pipelines, Lead incident response for customers, Scope blast radius, Coordinate containment, Guide remediation, Walk customers through compromises, Build pipelines to capture investigation patterns, Translate patterns into detection rules, Translate patterns into auto-remediation, Measure impact on investigation volume, Measure impact on investigation accuracy, Build mechanisms for engineer contribution, Build AI feedback loops, Improve autonomous investigation accuracy, Define and track metrics, Measure automation effectiveness, Reduce false positives, Increase auto-resolution coverage, Track engineer contribution rates, Mentor junior engineers, Structure artifacts as reusable automation inputs, Participate in on-call rotations, Review automation dashboard metrics, Investigate new attack patterns, Analyze malware behavior, Extract indicators, Build detection rules, Step into high-severity incidents, Analyze logs, Correlate indicators across accounts, Codify attack chains, Improve AI agent performance, Review and approve detection rule contributions", "teamCollaboration" : "Cross-functional teams; Leadership collaboration", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Attack patterns; Supply chain attacks; Cryptomining; Cloud-native architecture; Security operations", "domainList" : [ "attack-patterns", "supply-chain-attacks", "cryptomining", "cloud-native-architecture", "security-operations" ], "domainSpecificKnowledge" : [ "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "Security operations" ], "toolProficiency" : [ "AWS" ], "communicationSkills" : "Customer calls; Executive presentations", "continuousLearning" : "One-on-one coaching", "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data-driven decision making", "specialRequirements" : "On-call rotation, 24/7 follow-the-sun operating model", "outcomesObjectives" : "Reduce false positives; Increase auto-resolution coverage; Improve autonomous investigation accuracy", "qualificationsBasic" : "5+ years scripting, programming, or security code review, Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, Speak, write, and read fluently in Japanese, 5+ years troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans, Experience in industry-based security vulnerabilities identification, attack patterns, and remediation, Experience as a mentor, tech lead, or leading an engineering team", "qualificationsPreferred" : "Master's degree in Computer Science, Information Security, or a related field, Experience in automation or monitoring frameworks, deployment or development, Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent), Experience with AWS services in a security operations context", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for a Senior Security Engineer who builds the automation mechanisms that scale security response. You will investigate complex security incidents hands-on, build the frameworks that turn investigation expertise into scalable detection and auto-remediation, and architect the AI feedback loops that make the service smarter with every investigation. The AWS Security Incident Response team provides 24/7 security response through a follow-the-sun operating model. The service combines automated triage workflows, AI-powered investigation agents, and human security analysts to respond to threats across customer AWS environments at massive scale. Our AI systems autonomously resolve over 90% of routine investigations within minutes. The next challenge is building the mechanisms that accelerate this further — enabling every engineer on the team to contribute to detection and automation quality from their investigation work. Your deep understanding of how attacks work — from initial exploitation through lateral movement to data exfiltration — is what makes your automation effective. You will build detection enhancements, auto-remediation playbooks, and AI training pipelines that catch real threats, not just generate noise. We treat every investigation as a confirmed security incident until the data proves otherwise. Native Japanese language skills and fluent English language skills in speaking, reading, and writing. Key job responsibilities - Investigate and respond to complex security incidents hands-on — applying malware analysis, forensic analysis, or attribution skills to credential compromise, data exfiltration, supply chain attacks, and cryptomining - Lead incident response for customers during high-severity events: scope blast radius, coordinate containment, guide remediation, and get on calls with customers to walk them through what was compromised and the specific steps to contain the threat - Own the response-to-automation flywheel: build pipelines that capture investigation patterns (including Trust & Safety abuse cases), translate them into detection rules and auto-remediation, and measure impact on investigation volume and accuracy - Build mechanisms that enable every engineer on the team to contribute detection rules, automation playbooks, and AI training data — and build the AI feedback loops that ensure human corrections systematically improve autonomous investigation accuracy - Define and track metrics that measure automation effectiveness: false positive reduction, auto-resolution coverage, and engineer contribution rates to the pipeline - Mentor junior engineers on investigation methodology and structuring artifacts as reusable automation inputs - Participate in on-call rotations as part of the 24/7 follow-the-sun operating model, including weekends A day in the life - Review automation dashboard metrics: AI agent resolution rates, false positive trends, and engineer-submitted detection rules going live - Investigate new attack patterns the AI is struggling with — analyze malware behavior, extract indicators, and build detection rules that catch the pattern without generating false positives - Step into high-severity incidents directly — analyzing logs, correlating indicators across accounts, scoping blast radius, and getting on a call with the customer to guide containment - Codify attack chains from investigations into detection rules and AI agent improvements so the system catches the pattern autonomously next time - Review and approve detection rule contributions from junior engineers using your contribution framework About the team The AWS Security Incident Response team provides 24/7 threat monitoring, investigation, and response for customer AWS environments. The team is driving a strategic transformation — raising operational standards, building AI-powered investigation capabilities, and expanding coverage. We respond to customer requests within minutes. Zero queue tolerance is the operating standard. We value engineers who solve root causes over those who close tickets. Senior engineers enjoy close collaboration with leadership, one-on-one coaching, and the opportunity to shape the future of security operations at AWS scale. Basic Qualifications: - 5+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - Speak, write, and read fluently in Japanese - 5+ years of non-internship experience in troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques; including experience as a mentor, tech lead, or leading an engineering team Preferred Qualifications: - Master's degree in Computer Science, Information Security, or a related field - Experience in automation or monitoring frameworks, deployment or development - Knowledge of compliance and security standards across the enterprise IT landscape - * Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent) - * Experience with AWS services in a security operations context (Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM) Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Senior Security Engineer, AWS Security Incident Response at Amazon Web Services Japan GK. Skills: Security Incident Response, Automation, AI Feedback Loops, Detection Engineering. Build automation mechanisms. Investigate complex security incidents", "postedDate" : "2026-06-13T18:41:50.371", "createdAt" : "2026-06-13T18:41:50.371", "lastUpdated" : "2026-06-15T08:24:56.602", "ingestTimestamp" : "2026-06-13T18:41:50.371", "mongoId" : "6a25145474d8ee00a00bb3b2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation", "Mentoring", "Security Incident Response", "AI Feedback Loops", "Detection Engineering", "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations", "Roadmap planning", "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "GCIH", "GSEC", "GREM", "GCFA", "CISSP", "AWS" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 889.1795, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305653f292fd229cf27dba", "title" : "Security Engineer II, Security Incident Response Team (SIRT)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-16T08:11:33.016", "fingerprint" : "0987fca027bd6689942ce9706e1f89c85b280b67309ecc2a54aad3db41923465", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "externalId" : "c8d18061-5e73-4845-8dc5-690328d5af3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Network security, Endpoint security, Vulnerability management, Incident response, SIEM, Forensics, Scripting languages, AWS, Azure, GCP", "professionalSkills" : [ "Problem solving", "Analytical thinking", "Decision making" ], "hardSkillsList" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis" ], "hardSkills" : [ { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" } ], "majorSkills" : "Security Incident Response, Cloud Security, Threat Detection", "majorSkillsList" : [ "Security Incident Response", "Cloud Security", "Threat Detection" ], "coreResponsibilities" : "Respond to security incidents, Investigate security breaches, Analyze security alerts, Perform digital forensics, Develop incident response playbooks, Collaborate with engineering teams, Improve security posture, Stay current with threats", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud computing; Network protocols; Operating systems; Cyber threats", "domainList" : [ "cloud-computing", "network-protocols", "operating-systems", "cyber-threats" ], "domainSpecificKnowledge" : [ "Cloud computing", "Network protocols", "Operating systems", "Cyber threats" ], "toolProficiency" : [ "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Incident reports; Post-incident reviews", "continuousLearning" : "Stay current with threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Minimize impact of incidents; Reduce incident response time; Enhance security defenses", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in security engineering, Experience with security incident response, Experience with cloud security", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with scripting languages, Experience with SIEM tools, Experience with threat intelligence platforms, Experience with digital forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon is seeking qualified Security Engineers to join our innovative, high energy Information Security team. In this role you will work within the Amazon Security Incident Response Team (SIRT). SIRT Security Engineers respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems. SIRT Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. With your technical expertise, you will be solving security challenges at scale, working to protect the applications powering the most sophisticated e-commerce platform ever built. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, threat hunting, and threat intelligence. Key job responsibilities - Responding to security incidents, and coordinating a cohesive response involving multiple teams across Amazon. - Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future. - Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk. - Identifying and recommending solutions that improve or expand Amazon’s incident response capabilities, leveraging AI approaches where suitable. - Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. - Evaluating the impact of current security trends, advisories, publications, and academic research to Amazon, coordinating response as necessary across affected teams. - Keeping your knowledge and skills current with the rapidly changing threat landscape. - Participating in a follow-the-sun on-call rotation. A day in the life You will be part of an operational team, which owns and drives outcomes for security issues reported through a variety of mechanisms. When not \"on deck\" for those operational duties, you will be identifying and developing solutions to consistently and efficiently handle issues. You will also work with partner security teams across Amazon to raise our security bar and delight customers. There are also training and travel opportunities due to SIRT being a global team with presence in multiple countries. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II, Security Incident Response Team (SIRT) at Amazon.com Services LLC. Skills: Security Incident Response, Cloud Security, Threat Detection. Respond to security incidents. Investigate security breaches", "postedDate" : "2026-06-15T22:01:16.090", "createdAt" : "2026-06-15T22:01:16.090", "lastUpdated" : "2026-06-16T08:11:33.016", "ingestTimestamp" : "2026-06-15T22:01:16.090", "mongoId" : "6a305653f292fd229cf27dba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis", "Security Incident Response", "Cloud Security", "Threat Detection", "Problem solving", "Analytical thinking", "Decision making", "Cloud computing", "Network protocols", "Operating systems", "Cyber threats", "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 873.8268, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c8c8374d8ee00a0975b5a", "title" : "Incident Response Lead", "company" : "WHOOP", "industry" : "Information Security", "salary" : { "min" : 130000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "certifications" : [ "GCIH", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T12:05:20.732", "fingerprint" : "bddddbefd297cde0f29d2286596a2e145615d870cd25df0e237c4a59536e642a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/90e465bb-f1fb-4763-892e-320780db4f6f/application", "externalId" : "90e465bb-f1fb-4763-892e-320780db4f6f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, EDR, Cloud security monitoring, Digital forensics, Threat detection", "professionalSkills" : [ "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification" ], "hardSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "SOC operations", "level" : "intermediate" }, { "name" : "Host investigation", "level" : "intermediate" }, { "name" : "Cloud investigation", "level" : "intermediate" }, { "name" : "Log investigation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Threat detection, SOC operations", "majorSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations" ], "coreResponsibilities" : "Lead incident response activities, Serve as incident commander, Partner with SOC, Validate alerts, Guide investigations, Drive containment, Drive eradication, Conduct host investigations, Conduct cloud investigations, Conduct log investigations, Coordinate with forensic firms, Maintain incident response playbooks, Improve escalation procedures, Improve communication workflows, Lead post-incident reviews, Lead root cause analysis, Define remediation actions, Track remediation actions, Develop tabletop exercises, Execute incident simulations, Support breach impact assessments, Support regulatory notification, Improve detection capabilities, Improve response capabilities, Own incident metrics, Own incident reporting, Report response times, Report trends, Report risk reduction", "teamCollaboration" : "24x7 SOC provider; Cross-functional stakeholders; Security, IT, GRC, Legal", "projectManagementSkills" : [ "Remediation tracking" ], "domainKnowledge" : "Cloud-native environments; MITRE ATT&CK; GDPR; HIPAA; PCI", "domainList" : [ "cloud-native-environments", "mitre-att-ck", "gdpr", "hipaa", "pci" ], "domainSpecificKnowledge" : [ "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI" ], "toolProficiency" : [ "SIEM platforms", "EDR tools", "Cloud monitoring" ], "communicationSkills" : "Cross-functional coordination", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call escalation rotation", "outcomesObjectives" : "Systemic risk reduction", "qualificationsBasic" : "7+ years incident response, Lead incident investigations, Host, cloud, log investigations, SIEM platforms expertise, EDR tools expertise, Cloud security monitoring expertise, Work with external SOC, Attack frameworks understanding, GDPR, HIPAA, PCI support, Excellent communication skills, Bachelor's degree or certifications", "qualificationsPreferred" : "GCIH certification, GCFA certification, CISSP certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "At WHOOP, we’re on a mission to unlock human performance and healthspan. Our wearable technology provides personalized insights that help millions of members better understand their bodies and make smarter decisions about training, recovery, and lifestyle. We are seeking a Incident Response Lead to drive security incident response across the enterprise. In this role, you will serve as the primary internal escalation point and hands-on responder for security incidents, partnering closely with WHOOP’s 24x7 SOC provider and cross-functional stakeholders to investigate, contain, and remediate threats. This is a highly technical individual contributor role with significant ownership and visibility across Security, IT, GRC, and Legal. RESPONSIBILITIES: - - Lead hands-on incident response activities, serving as the primary internal escalation point for security events - Serve as the central incident commander across Security, IT, GRC, and Legal during active incidents - Partner with the SOC to validate alerts, guide investigations, and drive containment and eradication efforts - Conduct host, cloud, and log-based investigations, and coordinate with external forensic firms when needed - Maintain and continuously improve incident response playbooks, escalation procedures, and communication workflows - Lead post-incident reviews and root cause analysis, ensuring remediation actions are clearly defined and tracked - Develop and execute tabletop exercises and incident simulations to test and strengthen response readiness - Partner with GRC and Legal to support breach impact assessments and regulatory notification processes - Drive continuous improvement of detection and response capabilities across SIEM, EDR, cloud monitoring, and identity systems - Own incident metrics and reporting, including response times, trends, and systemic risk reduction initiatives - Participate in an on-call escalation rotation to provide after-hours incident leadership when required QUALIFICATIONS: - - 7+ years of experience in incident response, digital forensics, threat detection, or SOC operations - Proven experience leading incident investigations in complex, cloud-native environments - Strong experience conducting host, cloud, and log-based investigations - Hands-on expertise with SIEM platforms, EDR tools, and cloud security monitoring - Experience working with external SOC or MDR providers - Strong understanding of attack frameworks (MITRE ATT&CK) and their application to detection and response - Experience supporting breach response obligations under GDPR, HIPAA, PCI, or similar regulatory frameworks - Excellent communication skills with the ability to coordinate cross-functional stakeholders under pressure - Bachelor’s degree or relevant certifications (GCIH, GCFA, CISSP, or equivalent) This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements. ", "summaryDescription" : "Incident Response Lead at WHOOP. Skills: Incident response, Digital forensics, Threat detection, SOC operations. Lead incident response activities. Serve as incident commander", "createdAt" : "2026-06-14T04:00:46.619", "lastUpdated" : "2026-06-15T12:05:20.732", "ingestTimestamp" : "2026-06-14T04:00:46.619", "mongoId" : "6a2c8c8374d8ee00a0975b5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 130000, "salaryAnnualMax" : 170000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation", "Leadership", "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification", "Remediation tracking", "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI", "GCIH", "GCFA", "CISSP", "SIEM platforms", "EDR tools", "Cloud monitoring" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 872.7063, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c68fa74d8ee00a0905806", "title" : "Senior Incident Response Specialist, Cyber Security", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Response Specialist in Kuala Lumpur, Malaysia, adjusted for the cybersecurity industry and senior experience level." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "timestamp" : "2026-06-16T02:39:21.304", "fingerprint" : "d361c038e80e7ee25f06c2708e696babafce6881749e9a55b1eb9bfeb96da610", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f8691c89-168e-4178-9678-8a9d39b9914d/application", "externalId" : "f8691c89-168e-4178-9678-8a9d39b9914d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Elastic Stack, SIEM, Cloud", "professionalSkills" : [ "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding" ], "hardSkillsList" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises" ], "hardSkills" : [ { "name" : "Security alerts", "level" : "intermediate" }, { "name" : "Security events", "level" : "intermediate" }, { "name" : "Malware investigation", "level" : "intermediate" }, { "name" : "Phishing investigation", "level" : "intermediate" }, { "name" : "Insider threats", "level" : "intermediate" }, { "name" : "Cloud breaches", "level" : "intermediate" }, { "name" : "Detection rule creation", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Simulation exercises", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" } ], "majorSkills" : "Incident Response, Cyber Security, SIEM platform", "majorSkillsList" : [ "Incident Response", "Cyber Security", "SIEM platform" ], "coreResponsibilities" : "Monitor security alerts, Investigate security alerts, Analyze security incidents, Contain security incidents, Escalate security incidents, Tune SIEM rules, Suggest new detections, Analyze logs, Correlate logs, Create incident documentation, Maintain incident documentation, Create incident reports, Maintain incident reports, Create lessons learned, Maintain lessons learned, Support playbook execution, Remediate incidents, Perform root cause analysis, Provide use case insights, Validate use cases, Test use cases, Escalate confirmed incidents, Participate in reviews, Improve processes, Improve detections, Validate security events, Identify legitimate threats, Investigate malware incidents, Investigate phishing incidents, Investigate insider threats, Investigate cloud breaches, Assist in rule creation, Assist in rule tuning, Map MITRE ATT&CK, Improve detection quality, Hunt threats, Handle incidents, Collect evidence, Document incidents, Support compliance, Support audits, Contribute to automation, Participate in training, Participate in simulations, Participate in exercises, Onboard log sources, Manage log availability", "teamCollaboration" : "Collaborate with IT; Collaborate with network; Collaborate with application teams; Collaborate with MSSP; Collaborate with CSIRT; Collaborate with IT infrastructure", "domainKnowledge" : "Cyber resilience; MITRE ATT&CK; Cloud breaches; Insider threats; Malware; Phishing", "domainList" : [ "cyber-resilience", "mitre-att-ck", "cloud-breaches", "insider-threats", "malware", "phishing" ], "domainSpecificKnowledge" : [ "Cyber resilience", "MITRE ATT&CK", "Cloud breaches", "Insider threats", "Malware", "Phishing" ], "toolProficiency" : [ "Elastic Stack", "SIEM" ], "documentationSkills" : "Incident documentation; Incident reports; Lessons learned; Evidence collection; Compliance documentation; Audit documentation", "continuousLearning" : "Training sessions; Simulations; Tabletop exercises", "innovationCreativity" : "Automation opportunities", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Ensure timely response; Maintain cyber resilience; Align with MTTD goals; Align with MTTR goals", "qualificationsBasic" : "Perform deep-dive investigations, Conduct threat hunting, Support incident response reporting, Manage continuous logs availability", "qualificationsPreferred" : "MITRE ATT&CK mapping, Automation opportunities", "rawDescription" : "Role Mission The Senior Analyst - Cyber Security Incident Response is responsible for monitoring, detecting, and analyzing cybersecurity incidents through the Security Operations Centre (SOC) platform. The role supports the end-to-end incident lifecycle — including triage, investigation, containment, and closure — ensuring timely response to security events and maintaining cyber resilience. This role acts as the Level 2 (L2) Incident Responder, bridging SOC analysts and Incident Response management by performing deep technical analysis and coordinating with internal teams for resolution. Accountabilities: - Perform end-to-end incident triage and investigation of security alerts escalated from L1 SOC analysts. - Ensure timely incident analysis, containment, and escalation aligned with MTTD and MTTR goals. - Support the SIEM platform (Elastic Stack) by fine-tuning existing rules and suggesting new detections. - Conduct log analysis and correlation across multiple data sources (network, endpoint, and cloud). - Create and maintain incident documentation, reports, and lessons learned. - Support incident response playbook execution during containment and recovery phases. - Collaborate with IT, network, and application teams for incident remediation and root cause analysis. - Provide insights for use case improvements and participate in use case validation and testing. - Escalate confirmed incidents to CSIRT / Assistant Manager - Incident Response for further action. - Participate in post-incident reviews, contributing to process and detection improvements. - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. Requirements - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. #LI-JE1", "summaryDescription" : "Senior Incident Response Specialist, Cyber Security. Skills: Incident Response, Cyber Security, SIEM platform. Monitor security alerts. Investigate security alerts", "createdAt" : "2026-06-14T19:11:17.518", "lastUpdated" : "2026-06-16T02:39:21.304", "ingestTimestamp" : "2026-06-14T19:11:17.518", "mongoId" : "6a2c68fa74d8ee00a0905806", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises", "Incident Response", "Cyber Security", "SIEM platform", "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding", "Cyber resilience", "MITRE ATT&CK", "Malware", "Phishing", "Elastic Stack", "SIEM" ], "skillCount" : 31, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 845.1873, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6a8f74d8ee00a090c9b3", "title" : "Project Manager, Incident Response", "company" : "ABACUS", "industry" : "Cybersecurity", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Project Manager, Incident Response in the US Technology industry, adjusted for a remote work mode and manager experience level." }, "location" : "Remote in US", "locations" : [ "Remote in US" ], "certifications" : [ "PMP certification" ], "timestamp" : "2026-06-15T10:35:48.757", "fingerprint" : "1c88e11e9a6dddc3effeac573435e516572e6903d0011c5dae97ea2497aee0f5", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://abacustechnology.com/about/careers/current-vacancies/?gh_jid=7731438003", "externalId" : "7731438003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Systems engineering, Infrastructure deployment, Infrastructure enhancement", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Resource planning", "Continuous improvement", "Client-facing communication", "Expectation management", "Timeline management", "Consultative rapport" ], "hardSkillsList" : [ "Event log analysis", "Syslog analysis", "Monitoring data analysis", "Memory dump analysis", "Troubleshoot issues", "Configure systems", "Test systems", "Implement systems", "Refine systems", "Document systems", "Monitor systems", "Transition systems" ], "softSkillsList" : [ "Leadership", "Persistence", "Calm under pressure" ], "hardSkills" : [ { "name" : "Event log analysis", "level" : "intermediate" }, { "name" : "Syslog analysis", "level" : "intermediate" }, { "name" : "Monitoring data analysis", "level" : "intermediate" }, { "name" : "Memory dump analysis", "level" : "intermediate" }, { "name" : "Troubleshoot issues", "level" : "intermediate" }, { "name" : "Configure systems", "level" : "intermediate" }, { "name" : "Test systems", "level" : "intermediate" }, { "name" : "Implement systems", "level" : "intermediate" }, { "name" : "Refine systems", "level" : "intermediate" }, { "name" : "Document systems", "level" : "intermediate" }, { "name" : "Monitor systems", "level" : "intermediate" }, { "name" : "Transition systems", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Persistence" }, { "name" : "Calm under pressure" } ], "majorSkills" : "Incident response, Project delivery, Client management", "majorSkillsList" : [ "Incident response", "Project delivery", "Client management" ], "coreResponsibilities" : "Coordinate external technical projects, Follow established core processes, Follow project templates, Follow methodologies, Lead Professional Services stand-ups, Review event logs, Review Syslogs, Review monitoring data, Review memory dumps, Troubleshoot issues, Provide security-enhancing solutions, Maintain billable utilization targets, Generate mandatory reports, Update mandatory reports daily, Meet project deadlines, Exceed project deadlines, Keep projects profitable, Measure project success, Leverage cost variance, Leverage schedule variance, Contribute to customer satisfaction, Record change details, Record time worked, Record work notes in ServiceNow, Identify process improvement opportunities, Execute project deliverables, Transition deliverables to stakeholders, Perform approved changes, Communicate project status internally, Communicate project status externally, Provide project follow-ups, Provide requested feedback", "teamCollaboration" : "Cross-functional teams; Client calls; Internal communication; External communication", "projectManagementSkills" : [ "Project management", "Waterfall projects", "Process management", "Methodologies" ], "domainKnowledge" : "Incident response; Technical environments; Containment strategies; Recovery strategies; MFA; Endpoint protection; Systems; Applications; Infrastructures", "domainList" : [ "incident-response", "technical-environments", "containment-strategies", "recovery-strategies", "mfa", "endpoint-protection", "systems", "applications", "infrastructures" ], "domainSpecificKnowledge" : [ "Incident response", "Technical environments", "Containment strategies", "Recovery strategies", "MFA", "Endpoint protection", "Systems", "Applications", "Infrastructures" ], "toolProficiency" : [ "ServiceNow" ], "communicationSkills" : "Client-facing communication; Verbal communication; Writing skills; Professional wording; Grammatically pristine; Clear communication; Effective communication; Persuasive communication; Translate technical to C-Suite; Convey energy; Convey confidence; Convey interest; Convey competence; Convey professionalism; Convey trustworthiness", "documentationSkills" : "Thorough documentation; Status updates", "continuousLearning" : "Online courses", "problemSolvingSkills" : "Troubleshoot issues; Sort through chaos; Make order; Uncover hidden gems; Scale roadblocks; Dodge roadblocks; Blast through roadblocks", "specialRequirements" : "On-call rotation, Work into evenings, Work into weekends, Work into holidays, Minimal travel, Open to travel", "outcomesObjectives" : "Result in progressive change; Result in secure enhancements; Establish ownership of direction; Ensure parties are aligned; Deliver strategic initiatives; Achieve high customer satisfaction scores; Keep projects profitable; Not skimp on quality", "qualificationsBasic" : "5 years of experience delivering IT waterfall projects, Managed projects as assigned PM, Owned client-facing projects, Experience with systems and virtualization, Exposure to enterprise infrastructures, Adaptable approach to working hours, Open to travel when needed", "qualificationsPreferred" : "Four-year degree in relevant field, PMP certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Job Summary: As our Incident Response Project Manager, you will be primarily dedicated to external, client-facing projects within our Incident Response team. You will be the driving force behind successful, thorough, and robust project deliverables that result in progressive change and secure enhancements to our client’s technical environments.As the primary face of the team on client calls, you will field questions, establish trust, and set precedent as the go-to person for all incident-related matters. You will be tasked with understanding the current state of an incident, establishing ownership of the overall direction of containment and recovery, and ensuring all parties are aligned with the verticals defined. Constantly in sync with the primary lead engineer leading containment and recovery strategies and delivering agreed-upon strategic initiatives to all parties, you will work as part of a dynamic, flexing team – ready to respond at a moment’s notice mapping into your team's on-call rotation. This position will report directly to our Director of Incident Response PMO. Responsibilities (including, but not limited to): Project Management Coordinates multiple, external technical projects from inception to completion: Follows established core processes, project templates, and methodologies Takes a lead in Professional Services stand-ups review event logs, Syslogs, monitoring data, and memory dumps to troubleshoot issues. Security-enhancing solutions for systems and applications (including MFA and endpoint protection). Metrics Measuring Success Maintains billable utilization targets Ensures all mandatory reports are generated and updated daily Meets or exceeds deadlines for all assigned projects Keeps projects profitable while not skimping on quality Leverages cost variance and schedule variance formulas to measure project success Contributes to the team’s attainment of high customer satisfaction scores on project delivery Records complete change details, time worked entries, and work notes in ServiceNow in real-time Identifies opportunities for process improvement Following Process Follows Entara’s project process to execute project deliverables: configure, test, implement, refine, document, monitor, and transition to appropriate stakeholders. Follows Entara’s Change Management Process to perform approved changes in client environments Communicates internally and (as directed) externally to provide timely information regarding project status, promised follow-ups, and requested feedback on a detailed and professional basis. Skills and Experience: You’re a knowledge seeker. Regardless of method, you have obtained and exposed yourself to knowledge centers that have qualified you to master technical project delivery and the systems engineering required to successfully recover, deploy, and enhance infrastructures. You ideally have a four-year degree in a relevant field and are working towards or have already obtained your PMP certification. You’ve managed projects as the assigned “PM” instead of only having delivered them as an engineer. You enjoy the dynamic of wearing multiple hats and taking the lead on client-facing communication, expectations, and timelines. You’ve owned client-facing projects and have established a consultative rapport resulting in high client satisfaction levels upon project closure. You have at least 5 years of experience delivering IT waterfall projects working with systems and virtualization with exposure to enterprise infrastructures. You keep us true to our word. You have a tried-and-true organizational system to keep yourself (and others) on task while ensuring exceptional quality. You possess a winning combination of superb writing skills and highly refined verbal communication skills. You convey energy, confidence, and genuine interest over a call just as easily as you convey competence, professionalism, and trustworthiness in person. You translate to a C-Suite audience as seamlessly as you “talk tech” with engineers. Your emails are professionally worded, grammatically pristine, with the right pinch of personality. In any medium, you pride yourself in clear, effective, and persuasive communication. You have an approach to working hours that is more adaptable than the traditional \"9-to-5\". As this team responds to business-critical remediation projects, we are looking for an individual who is career-driven and won’t shrink back when work requirements extend into evenings, weekends, and holidays. While travel is minimal, you’re also open to getting on a plane when needed to be present at client sites when a project requires it. On the flip side, your hard work is rewarded with a generous comp plan that grows with the efforts you contribute, a flexible PTO policy, and an equally inspiring team that climbs mountains together. You are ready to be an effective remote worker and have a dedicated, private space for a home office with a private internet connection with at least 50MBPS bandwidth. Public WiFi and shared common spaces do not meet these standards. Desired Personality Traits: A Mythical Character. You aren’t alarmed when someone expects you to be a hero; in fact, you pride yourself on frequently delivering big just when all hope seems lost. Your persistence is notable, and you are a determined soul who insists on turning “We can’t” into “We can” If you meet a roadblock, you’ll try to scale it, dodge it, or blast through it before ever admitting defeat. The Devil is in the Details. You have an angelic ability to sort through chaos and make order. Your eye and attention for details helps you uncover hidden gems, while your thorough documentation and status updates capture and convey every facet of each stone. Corporate Usain Bolt. You’re capable of moving rapidly from task to task without getting rattled. Your desk is clear, your email inbox is empty, your kitchen counters aren’t cluttered, and you never spend 15 minutes tearing around the house in a desperate hunt for your car keys or train pass. You are a lean, mean, well-oiled machine. A Combo Meal. Your style is winningly ambidextrous. While you are known to be a loyal teammate and never falter on your commitment to seeing others thrive, you are not a push-over. You will fight back and advocate for the best marriage of client desires and superb delivery-pushing us along the path towards perfection. If Samwise Gamgee and Monica Geller had a child, it would be you. Emotionally Mature. Through your years of experience, you’ve learned that occasional hiccups are inevitable and now know enough to just keep moving towards the end goal. You’re calm under pressure, encourage respectful dialog, and understand that communication is the balm that can soothe the sting of conflict. The Benefits of Working for Entara, an Abacus Group Company: Exposure to a diverse array of technologies. Internal opportunities for career advancement. Part of a team of experienced professionals that aim to deliver exceptional service Competitive compensation. Robust benefits package: medical, dental, vision, disability, life insurance, 401k, and PTO. Opportunities to further technical education through online courses. Positive, friendly, and supportive office environment.", "summaryDescription" : "Project Manager, Incident Response at ABACUS. Skills: Incident response, Project delivery, Client management. Coordinate external technical projects. Follow established core processes", "postedDate" : "2026-06-14T01:43:32.664", "createdAt" : "2026-06-14T01:43:32.664", "lastUpdated" : "2026-06-15T10:35:48.757", "ingestTimestamp" : "2026-06-14T01:43:32.664", "mongoId" : "6a2c6a8f74d8ee00a090c9b3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Event log analysis", "Syslog analysis", "Monitoring data analysis", "Memory dump analysis", "Troubleshoot issues", "Configure systems", "Test systems", "Implement systems", "Refine systems", "Document systems", "Monitor systems", "Transition systems", "Leadership", "Persistence", "Calm under pressure", "Incident response", "Project delivery", "Client management", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Resource planning", "Continuous improvement", "Client-facing communication", "Expectation management", "Timeline management", "Consultative rapport", "Project management", "Waterfall projects", "Methodologies", "Technical environments", "Containment strategies", "Recovery strategies", "MFA", "Endpoint protection", "Systems", "Applications", "Infrastructures", "PMP certification", "ServiceNow" ], "skillCount" : 41, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 790.5204, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69e104402beec4dd3def2577", "title" : "Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Singapore, adjusted for the technology industry and a large company size." }, "location" : "SGP", "locations" : [ "SGP" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:22:21.224", "fingerprint" : "40bb89751ca82072e1830c381dd327c4aca04b10b3800fda172ae2e11fc89203", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386227/apply", "externalId" : "bf3e3eb2-1460-4e11-bafb-1fe3f4b46363", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend", "professionalSkills" : [ "Security response", "Threat detection", "Incident response", "Security automation", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal" ], "hardSkillsList" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities" ], "softSkillsList" : [ "Learning new concepts" ], "hardSkills" : [ { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" }, { "name" : "Incident reporting", "level" : "intermediate" }, { "name" : "Auto-remediation capabilities", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Learning new concepts" } ], "majorSkills" : "Incident response, Threat detection, Security automation", "majorSkillsList" : [ "Incident response", "Threat detection", "Security automation" ], "coreResponsibilities" : "Respond to threat findings, Identify security threats, Evaluate security threats, Communicate security threats, Propose remediation for security issues, Contribute to security automation development, Contribute to security posture improvements, Track effectiveness of detective controls, Report effectiveness of detective controls, Develop processes for response effectiveness, Develop policies for response effectiveness, Monitor networks for potential threats, Monitor systems for potential threats, Perform triage for security alerts, Document suspicious activity, Report security issues, Perform threat detection, Perform incident response, Detect cyber threats, Mitigate cyber threats, Protect AWS Customers, Learn new technologies, Learn new procedures", "teamCollaboration" : "Work alongside security engineers; Work with partner teams", "domainKnowledge" : "AWS Security; Incident response; Threat monitoring; Detective controls; Protective controls; Attack techniques; Cyber threats", "domainList" : [ "aws-security", "incident-response", "threat-monitoring", "detective-controls", "protective-controls", "attack-techniques", "cyber-threats" ], "domainSpecificKnowledge" : [ "AWS Security", "Incident response", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats" ], "toolProficiency" : [ "CrowdStrike Falcon", "Wiz Defend" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Document suspicious activity", "continuousLearning" : "Learning new concepts; Learning new technologies; Learning new procedures", "problemSolvingSkills" : "Work through ambiguity; Identify suspicious activity", "specialRequirements" : "On-call support, Periodic on-call responsibilities, On-call responsibilities including weekends", "outcomesObjectives" : "Keep customers secure; Increase security response effectiveness; Minimize disruption to customer workloads", "qualificationsBasic" : "Bachelor's degree in Engineering, Experience with web protocols, Experience with common security attacks, Experience with remediation, Knowledge of system, Knowledge of network, Knowledge of OS, Experience solving problems by writing code, Experience solving problems with scripts", "qualificationsPreferred" : "Experience with AWS services, Experience with other cloud offerings, Experience triaging security alerts, Front-line analysis experience, Escalation experience, GCIH certification, GSEC certification, Security+ certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities * Respond to threat findings that indicate unauthorized activity has occurred * Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. * Contribute to the development of security automation and security posture improvements. * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend * Develop processes and policies to increase security response effectiveness. * On-call support: This role requires periodic on-call responsibilities including weekends. A day in the life As a Security Engineer in AWS Security Incident Response, your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team AWS Security Incident Response provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. The service enhances existing security capabilities by providing security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. Basic Qualifications: - Bachelor's degree in Engineering, Computer Science, or a related field - Experience with web protocols, common security attacks, and remediation (non-internship) - Knowledge of system, network and OS - Experience solving basic problems by writing code or scripts with some assistance Preferred Qualifications: - Experience with AWS services or other cloud offerings - Experience triaging security alerts, front-line analysis, and escalation - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer, AWS Security Incident Response at Amazon Web Services. Skills: Incident response, Threat detection, Security automation. Respond to threat findings. Identify security threats", "postedDate" : "2026-06-13T04:14:17.343", "createdAt" : "2026-06-13T04:14:17.343", "lastUpdated" : "2026-06-15T02:22:21.224", "ingestTimestamp" : "2026-06-13T04:14:17.343", "mongoId" : "69e104402beec4dd3def2577", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386227/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities", "Learning new concepts", "Incident response", "Threat detection", "Security automation", "Security response", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal", "AWS Security", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats", "GCIH", "GSEC", "Security+", "CrowdStrike Falcon", "Wiz Defend" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 785.3682, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a305851f292fd229cf414c8", "title" : "Senior Automation Engineer", "company" : "Matrix Technologies", "industry" : "Consulting", "salary" : { "min" : 115000.0, "max" : 165000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Automation Engineer in Cincinnati, adjusted for industry and company size." }, "location" : "Cincinnati, OH", "locations" : [ "Cincinnati", "OH" ], "timestamp" : "2026-06-16T08:28:26.671", "fingerprint" : "6d3f083d63ebf315c1c507b1581a26d4dca179caaf67a28c8ec02ac31bbfa53e", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://matrix-technologies-inc.breezy.hr/p/43d6c031b2a6-senior-automation-engineer", "externalId" : "43d6c031b2a6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Cincinnati", "state" : "Ohio", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.1012809,-84.5127405" } ], "locationText" : "Cincinnati, Ohio, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "SENIOR AUTOMATION ENGINEER ABOUT US Matrix Technologies, Inc. has been a leading provider of engineering, automation, and systems integration services since 1980. Guided by \"The Matrix Way,\" we value teamwork, collaboration, and fun. Recognized as a Top Workplace, we offer flexible schedules, prof", "summaryDescription" : "Senior Automation Engineer at Matrix Technologies", "createdAt" : "2026-06-15T22:11:42.452", "lastUpdated" : "2026-06-16T08:28:26.671", "ingestTimestamp" : "2026-06-15T22:11:42.452", "mongoId" : "6a305851f292fd229cf414c8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 165000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 780.257, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Engineering", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305851f292fd229cf414c9", "title" : "Senior Automation Engineer", "company" : "Matrix Technologies", "industry" : "Consulting", "salary" : { "min" : 115000.0, "max" : 165000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Automation Engineer in Raleigh, United States, adjusted for manufacturing industry and company size." }, "location" : "Raleigh, NC", "locations" : [ "Raleigh", "NC" ], "timestamp" : "2026-06-16T05:28:52.749", "fingerprint" : "5e3826fc3db79754ba81b0ce60630ae6d89c02fa76554c3518e0ffdfbc86c89c", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://matrix-technologies-inc.breezy.hr/p/1ca4cf1c6491-senior-automation-engineer", "externalId" : "1ca4cf1c6491", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Raleigh", "state" : "North Carolina", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "35.7803977,-78.6390989" } ], "locationText" : "Raleigh, North Carolina, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "SENIOR AUTOMATION ENGINEER ABOUT US Matrix Technologies, Inc. has been a leading provider of engineering, automation, and systems integration services since 1980. Guided by \"The Matrix Way,\" we value teamwork, collaboration, and fun. Recognized as a Top Workplace, we offer flexible schedules, prof", "summaryDescription" : "Senior Automation Engineer at Matrix Technologies", "createdAt" : "2026-06-15T22:11:37.320", "lastUpdated" : "2026-06-16T05:28:52.749", "ingestTimestamp" : "2026-06-15T22:11:37.320", "mongoId" : "6a305851f292fd229cf414c9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 165000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 780.25226, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305851f292fd229cf414ca", "title" : "Senior Automation Engineer", "company" : "Matrix Technologies", "industry" : "Manufacturing", "salary" : { "min" : 115000.0, "max" : 165000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Automation Engineer in Overland Park, United States, adjusted for industry and company size." }, "location" : "Overland Park, KS", "locations" : [ "Overland Park", "KS" ], "timestamp" : "2026-06-16T07:39:33.809", "fingerprint" : "cb1571bfe56b4f7e95fa8e8047030611565c4ca8eb0cd90bc4aa949b69d9deb2", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://matrix-technologies-inc.breezy.hr/p/0d2723f52127-senior-automation-engineer", "externalId" : "0d2723f52127", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Overland Park", "state" : "Kansas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9742502,-94.6851702" } ], "locationText" : "Overland Park, Kansas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "workSiteFlexibility" : "Onsite", "rawDescription" : "SENIOR AUTOMATION ENGINEER ABOUT US Matrix Technologies, Inc. has been a leading provider of engineering, automation, and systems integration services since 1980. Guided by", "summaryDescription" : "Senior Automation Engineer at Matrix Technologies", "createdAt" : "2026-06-15T22:11:11.124", "lastUpdated" : "2026-06-16T07:39:33.809", "ingestTimestamp" : "2026-06-15T22:11:11.124", "mongoId" : "6a305851f292fd229cf414ca", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 165000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 780.2278, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Engineering", "llmIndustryConfidence" : 0.95 }, { "id" : "68c2e423f8b1b0376634c56d", "title" : "Senior Incident Response Engineer, Devices & Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hawthorne, California, USA", "locations" : [ "Hawthorne, California, USA" ], "certifications" : [ "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA" ], "timestamp" : "2026-06-15T08:13:32.312", "fingerprint" : "3317fe4da3a6f579d3a5ccdc8430939e8a2a28d3935ec2384cf4f9b32c5db032", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3072356/apply", "externalId" : "2d1861cb-aa75-46c6-9067-b6a683645372", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hawthorne", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9128272,-118.3426122" } ], "locationText" : "Hawthorne, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, WAF, EDR/XDR, Python, PowerShell, Bash, Splunk, SOAR, SQL", "professionalSkills" : [ "Incident response", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis" ], "hardSkillsList" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries" ], "softSkillsList" : [ "Judgment under pressure", "Calmness" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Network telemetry", "level" : "intermediate" }, { "name" : "Attacker TTPs", "level" : "intermediate" }, { "name" : "MITRE ATT&CK", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "SQL queries", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Judgment under pressure" }, { "name" : "Calmness" } ], "majorSkills" : "Incident response, Security engineering, Detection engineering", "majorSkillsList" : [ "Incident response", "Security engineering", "Detection engineering" ], "coreResponsibilities" : "Investigate security incidents, Respond to security incidents, Drive rapid response, Drive effective response, Act as incident responder, Act as incident commander, Coordinate technical response, Keep stakeholders informed, Conduct post-mortem analysis, Identify root causes, Identify security improvement opportunities, Consult with builder teams, Ensure security designed into products, Collaborate with stakeholders, Execute incident response, Develop detections, Maintain detections, Respond to detections, Combat fraud, Combat abuse, Develop prevention capabilities, Develop detection capabilities, Develop response capabilities, Increase capability through automation, Increase efficiency through automation, Increase signal quality using AI/ML, Assist in runbook development, Assist in playbook tuning, Drive process improvements, Coordinate response efforts, Share learnings, Maintain WAF products, Support WAF products, Protect services from abuse, Drive WAF adoption, Evaluate WAF rules, Tune WAF rules, Develop SQL queries, Analyze log data, Extract information from logs, Extract information from databases, Extract information from services, Spearhead incident response, Drive decision-making, Conduct impact assessments, Implement containment strategies, Develop durable solutions, Proactively hunt threats, Create new detection mechanisms, Consult on security for new product designs, Analyze data, Identify hidden vulnerabilities", "teamCollaboration" : "Cross-functional teams; Global Amazon Security team; Other Incident Response teams", "projectManagementSkills" : [ "Runbook development", "Playbook tuning" ], "domainKnowledge" : "Devices and Services security; IoT platforms; Customer safety; Customer privacy; Fraud and abuse; Distributed systems; Cloud-native architectures; Service-oriented environments; IoT device security; Embedded systems", "domainList" : [ "devices-and-services-security", "iot-platforms", "customer-safety", "customer-privacy", "fraud-and-abuse", "distributed-systems", "cloud-native-architectures", "service-oriented-environments", "iot-device-security", "embedded-systems" ], "domainSpecificKnowledge" : [ "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems" ], "toolProficiency" : [ "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "communicationSkills" : "Clear communication; Stakeholder communication", "documentationSkills" : "Document work thoroughly; Contribute to post-incident reviews", "continuousLearning" : "Expand AI/ML skills", "innovationCreativity" : "Identify opportunities to raise the bar", "problemSolvingSkills" : "Problem-solvers; Investigative instincts; Troubleshooting", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Reduce or eliminate risk; Improve security for Amazon products; Improve security for Amazon services", "qualificationsBasic" : "5+ years cybersecurity experience, Incident response experience, Detection engineering experience, Security operations experience, Working knowledge of AWS, Working knowledge of WAF, Working knowledge of EDR/XDR tools, Working knowledge of network telemetry, Working knowledge of log analysis, Practical knowledge of attacker TTPs, Experience leveraging MITRE ATT&CK, Interpersonal skills, Communication skills, Proficiency with scripting, Proficiency with automation", "qualificationsPreferred" : "Proficiency with SIEM platform, Writing SIEM searches, Creating SIEM alerts, Analyzing SIEM log data, Forensic techniques, Threat hunting techniques, Identify adversary behavior, Detect anomalies, Analyze malware, Experience in large enterprise environments, Supporting multiple business lines, Experience securing distributed systems, Responding to incidents in distributed systems, Experience with cloud-native architectures, Experience with service-oriented environments, Experience with IoT device security, Experience with embedded systems forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you ready to protect millions of homes and families as part of Amazon's elite Device Security Incident Response team? Join us in defending Ring, Blink, eero, and other industry-leading IoT platforms where every incident response decision impacts real people's safety and privacy. We’re looking for a seasoned security engineer to join a cross-functional Incident Response team supporting multiple Amazon devices brands. This is a hands-on role is focused on protecting the security and privacy of millions of customers by responding to incidents that impact real-world products and services. Our customers trust us with their safety and personal spaces, and it’s our responsibility to uphold that trust through strong, effective security practices. You will become a subject matter expert in the brands you support, leading our response to incidents through detection, assessment, containment, eradication, and post-mortem, while identifying opportunities to raise the bar on security for Amazon products and Customers. This high-visibility role requires clear communication, sound judgment under pressure, and the ability to work across organizational boundaries. You will be a strong advocate for customer safety and privacy, ensuring our devices deliver protection without compromise. You will document your work thoroughly, contribute to post-incident reviews, and collaborate with engineering teams to drive long-term improvements across the business. You will have opportunities to utilize, or expand your AI/ML skills, as we focus on automation. Key job responsibilities * Investigate and respond to security incidents in the Devices and Services org, setting the pace, and driving rapid, effective response that reduces or eliminates risk * Act as an incident responder or commander during active security events, coordinating technical response while keeping business stakeholders informed * Conduct thorough post-mortem analysis of security incidents, driving root cause identification, and identifying opportunities to improve security for Amazon products and services * Security consults with builder teams to ensure that security is designed into products from their inception * Collaborate with both technical, and non-technical stakeholders at all levels of the business, to execute rapid, and effective incident response * Develop, maintain, and respond to detections using Splunk/SOAR, as well as internal Amazon tooling * Combat various forms of fraud and abuse, by coordinating with business teams to develop comprehensive prevention/detection/response capabilities * Contribute to team efforts to increase capability and efficiency through automation of manual workloads and increase signal quality using AI/ML tools or approaches * Assist in runbook development, playbook tuning, and continuous process improvements * Participate in an on-call rotation (approx. two weekend days per month) * Work within a global, collaborative Amazon Security team where engineers and specialists support one another to solve complex problems and respond to security challenges together * Coordinate response efforts with other Incident Response teams at Amazon when appropriate, and share learnings * Maintain and support WAF products that protect Amazon services from abuse, drive adoption, evaluate or tune rules * Develop and update SQL queries to investigate security incidents, analyze log data, and extract relevant information from logs, databases and services. A day in the life As a Security Incident Response Engineer, you'll guide our team through complex security challenges impacting millions of customers. You'll: • Spearhead end-to-end incident response across Amazon's device ecosystem • Drive real-time decision-making during active incidents • Conduct impact assessments and implement containment strategies • Develop durable solutions with engineering teams • Proactively hunt threats and create new detection mechanisms • Consult on security for new product designs • Analyze data to identify hidden vulnerabilities We seek naturally curious problem-solvers who combine technical expertise with investigative instincts. You'll be the calm voice in the storm, transforming chaos into clarity and consistently safeguarding our customers' trust in Amazon's devices and services. About the team We're a tight-knit group of Security Engineers united by our mission to protect Amazon's customers. Though small, our impact is outsized. We've driven meaningful improvements across Amazon's device ecosystem through technical excellence and relentless customer advocacy. We're engineers first, approaching challenges with security expertise to create practical solutions. We champion \"better products\" over \"more products,\" solving problems collaboratively with empathy and partnership. We're not the team that just says \"no\" – we find secure paths forward. When incidents arise, we need our builders to feel relief when we arrive. We build bridges, not ivory towers, transforming security from a barrier into an enabler of innovation. Basic Qualifications: - * 5+ years of industry experience in cybersecurity, with a strong foundation in incident response, detection engineering, or security operations - * Working knowledge of AWS, WAF, EDR/XDR tools, network telemetry, and log analysis - * Practical knowledge of attacker tactics, techniques, and procedures (TTPs), with experience leveraging MITRE ATT&CK or similar frameworks to guide incident response or detection engineering - * Strong interpersonal and communication skills; able to calmly manage high-stakes coordination and decision-making - * Proficiency with scripting or automation (e.g., Python, PowerShell, Bash) Preferred Qualifications: - * Proficiency with at least one SIEM platform, including writing searches, creating alerts, and analyzing log data to support security investigations; experience with Splunk strongly preferred - * Exposure to AI/ML-driven anomaly detection, or behavior modeling tools - * Demonstrated ability to use forensic or threat hunting techniques to identify adversary behavior, detect anomalies, analyze potential malware to support containment and eradication - * Security certifications such as CISSP, CISM, CRISC, GCIH, CCIR, GCDA, etc. - * Prior experience in large enterprise environments or supporting multiple business lines - * Experience securing or responding to incidents in large-scale distributed systems, including cloud-native architectures and service-oriented environments - * Experience with IOT device security and embedded systems forensics Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Incident Response Engineer, Devices & Services Security at Amazon.com Services LLC. Skills: Incident response, Security engineering, Detection engineering. Investigate security incidents. Respond to security incidents", "postedDate" : "2026-06-13T10:06:54.792", "createdAt" : "2026-06-13T10:06:54.792", "lastUpdated" : "2026-06-15T08:13:32.312", "ingestTimestamp" : "2026-06-13T10:06:54.792", "mongoId" : "68c2e423f8b1b0376634c56d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3072356/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries", "Judgment under pressure", "Calmness", "Incident response", "Security engineering", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis", "Runbook development", "Playbook tuning", "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems", "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA", "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "skillCount" : 42, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 774.57184, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security" }, { "id" : "6a2c8bbe74d8ee00a097397f", "title" : "Project Manager (Incident Response)", "company" : "MOXFIVE", "industry" : "PMO", "salary" : { "min" : 80000.0, "max" : 120000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "CAPM", "PMP", "CSM" ], "timestamp" : "2026-06-15T05:22:05.118", "fingerprint" : "3d1634295f9f4c519ba215312b85f54aa5fdb74d333a0d872e01a70dca4acf3e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/moxfive/67da822e-6f01-4495-be15-23a58c291040/application", "externalId" : "67da822e-6f01-4495-be15-23a58c291040", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceLevel" : "Manager", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Financial tracking", "Budget monitoring", "Time tracking", "Project accounting" ], "hardSkills" : [ { "name" : "Financial tracking", "level" : "intermediate" }, { "name" : "Budget monitoring", "level" : "intermediate" }, { "name" : "Time tracking", "level" : "intermediate" }, { "name" : "Project accounting", "level" : "intermediate" } ], "majorSkills" : "Incident response, Project management, Client communication", "majorSkillsList" : [ "Incident response", "Project management", "Client communication" ], "coreResponsibilities" : "Coordinate incident response projects, Align technical workstreams, Serve as connection to clients, Serve as connection to technical teams, Serve as connection to legal counsel, Serve as connection to stakeholders, Own project documentation, Generate Statements of Work, Generate change orders, Generate level of efforts, Compile status updates, Distribute status updates, Monitor project budgets, Track time, Track expenses, Flag scope creep, Coordinate scheduling for meetings, Coordinate scheduling for technical activities, Coordinate scheduling for stakeholder briefings, Identify project risks, Surface project risks, Contribute to process improvement, Contribute to system improvement", "teamCollaboration" : "Cross-functional workstreams; Client coordination; Technical team coordination; Legal counsel coordination; Stakeholder coordination", "projectManagementSkills" : [ "Project coordination", "Project management", "Milestone logging", "Deliverable scheduling", "Call cadence management", "Scope creep management", "Risk identification" ], "domainKnowledge" : "Incident response; Cybersecurity; IT services; Ransomware attacks; Forensics; Restoration; Remediation; Legal documentation; Client communications", "domainList" : [ "incident-response", "cybersecurity", "it-services", "ransomware-attacks", "forensics", "restoration", "remediation", "legal-documentation", "client-communications" ], "domainSpecificKnowledge" : [ "Incident response", "Cybersecurity", "IT services", "Ransomware attacks", "Forensics", "Restoration", "Remediation", "Legal documentation", "Client communications" ], "toolProficiency" : [ "Microsoft Office", "Excel", "PowerPoint", "Salesforce", "HubSpot" ], "communicationSkills" : "Status reports; Client-facing documentation; Stakeholder briefings", "documentationSkills" : "Project documentation; Trackers; Status reports; Milestone logs; Deliverable schedules; Call cadence", "continuousLearning" : "Process improvement; System improvement", "problemSolvingSkills" : "Complexity management", "specialRequirements" : "On-call schedule rotation", "outcomesObjectives" : "Keep projects organized; Shape client experience; Keep response on track; Maintain client trust; Engagements close with precision; Engagements close with professionalism", "qualificationsBasic" : "3+ years project coordination experience, 3+ years project management experience, Bachelor's degree or equivalent experience", "qualificationsPreferred" : "Background in consulting, Background in professional services, Background in client-facing coordination, Exposure to cybersecurity, Exposure to IT services, Exposure to incident response, Experience generating SOWs, Experience generating proposals, Experience generating contract documentation, Familiarity with legal requirements, Familiarity with insurance requirements, Experience with CRM systems, CAPM certification, PMP certification, CSM certification, Actively working toward certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Project Manager (Incident Response) Who You Are You are the person who makes chaos look manageable. When a cyberattack hits and five workstreams are spinning at once, you're the one holding the center, tracking every moving part, keeping every stakeholder informed, and making sure nothing falls through the cracks. You don't need to speak fluent threat actor, but you know exactly what needs to happen next and who needs to know about it. You speak with clients just as fluently as you speak with the technical team. You know the difference between a status update that actually helps and one that just creates more questions. You've managed projects under pressure before, and you've learned that in high-stakes environments, precision and calm are superpowers. You're wired for complexity. Juggling 5–8 concurrent engagements doesn't overwhelm you, it's where you do your best work. You care about the details that others overlook, because you know those details are what keep a response on track and a client's trust intact. Why You Matter You'll be joining MOXFIVE as a Project Manager supporting our Incident Response practice - the operational backbone that keeps our engagements running when organizations need us most. When ransomware strikes, the technical work is only part of the story. Forensics, restoration, remediation, legal documentation, client communications all must move simultaneously, and someone has to orchestrate it all. That's you. You're the reason our technical teams can stay focused on the response itself, our clients stay informed without feeling lost, and our engagements close with the precision and professionalism MOXFIVE is known for. Your work doesn't just keep projects organized. It directly shapes how organizations experience one of the most stressful moments they'll ever face. What You'll Do - Coordinate incident response projects across concurrent technical workstreams keeping everything and everyone aligned - Serve as the connection between clients, technical teams, legal counsel, and internal MOXFIVE stakeholders - Own project documentation: trackers, status reports, milestone logs, deliverable schedules, call cadence. They must be accurate, complete, and always current - Generate Statements of Work, change orders, and level of efforts with clear scope and pricing - Compile and distribute timely status updates that tell the story of where an engagement stands - Monitor project budgets, track time and expenses, and flag potential scope creep before they become a problem - Coordinate scheduling for client meetings, technical activities, and stakeholder briefings across a portfolio of active engagements - Identify and surface project risks early, working with stakeholders to keep things on course - Participate in a rotating on-call schedule (roughly once every six weeks) to support active incident response operations - Contribute to the ongoing improvement of MOXFIVE's project management processes and systems What You'll Bring - 3+ years of project coordination or project management experience, ideally in consulting, professional services, or technology environments - Exceptional organizational skills and meticulous attention to detail, you manage multiple concurrent projects without losing track of what matters - Strong written and verbal communication skills, with the ability to create clear, confident status reports and client-facing documentation - Proficiency with project management platforms - Advanced skills in Microsoft Office, particularly Excel and PowerPoint - Comfort interfacing with clients, partners, and senior stakeholders in fast-moving, high-pressure situations - Financial tracking experience - budget monitoring, time tracking, and basic project accounting - A process-oriented mindset with an eye for where things can be done better - Bachelor's degree in business, communications, or a related field. Or the equivalent in real-world experience Bonus points for: - Background in consulting, professional services, or client-facing coordination roles - Exposure to cybersecurity, IT services, or incident response environments - Experience generating SOWs, proposals, or contract documentation - Familiarity with legal or insurance-related project requirements - Experience with CRM systems like Salesforce or HubSpot - CAPM, PMP, CSM, or other project management certification (or actively working toward one)", "summaryDescription" : "Project Manager (Incident Response) at MOXFIVE. Skills: Incident response, Project management, Client communication. Coordinate incident response projects. Align technical workstreams", "createdAt" : "2026-06-13T22:06:35.396", "lastUpdated" : "2026-06-15T05:22:05.118", "ingestTimestamp" : "2026-06-13T22:06:35.396", "mongoId" : "6a2c8bbe74d8ee00a097397f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 80000, "salaryAnnualMax" : 120000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Financial tracking", "Budget monitoring", "Time tracking", "Project accounting", "Incident response", "Project management", "Client communication", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Project coordination", "Milestone logging", "Deliverable scheduling", "Call cadence management", "Scope creep management", "Risk identification", "Cybersecurity", "IT services", "Ransomware attacks", "Forensics", "Restoration", "Remediation", "Legal documentation", "Client communications", "CAPM", "PMP", "CSM", "Microsoft Office", "Excel", "PowerPoint", "Salesforce", "HubSpot" ], "skillCount" : 36, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 768.5042, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ac07574d8ee00a06f134d", "title" : "SecOps Engineer", "industry" : "DevOps", "salary" : { "min" : 565000.0, "max" : 940000.0, "currency" : "MXN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level SecOps Engineer in Mexico City, Mexico, adjusted for the Technology industry." }, "location" : "Worldwide", "locations" : [ "Worldwide" ], "timestamp" : "2026-06-14T23:17:09.469", "fingerprint" : "eebb7351580dc9a0f9874a324cb6f61d86da5854bdfe2d6ae636b0365462856f", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/lido.fi/3a086df3-4a1f-418f-9c70-27eee6138cf6/application", "externalId" : "3a086df3-4a1f-418f-9c70-27eee6138cf6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Mexico City", "country" : "Mexico", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "19.3207722,-99.1514678" } ], "locationText" : "Mexico City, Mexico", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Golang, JavaScript, Bash, SIEM, IDS/IPS, Docker, Kubernetes, GitHub Actions, Git, Ansible, Terraform", "professionalSkills" : [ "technical security assessments", "code audits", "design reviews", "vulnerability research", "risk assessments" ], "hardSkillsList" : [ "vulnerability research", "penetration testing", "incident response", "security alerts monitoring", "security practices", "security tools", "security techniques" ], "softSkillsList" : [ "Negotiation", "Influence" ], "hardSkills" : [ { "name" : "vulnerability research", "level" : "intermediate" }, { "name" : "penetration testing", "level" : "intermediate" }, { "name" : "incident response", "level" : "intermediate" }, { "name" : "security alerts monitoring", "level" : "intermediate" }, { "name" : "security practices", "level" : "intermediate" }, { "name" : "security tools", "level" : "intermediate" }, { "name" : "security techniques", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" }, { "name" : "Influence" } ], "majorSkills" : "Security Integration, Incident Response, Collaboration", "majorSkillsList" : [ "Security Integration", "Incident Response", "Collaboration" ], "coreResponsibilities" : "Develop secure systems, Define processes, Define systems, Define applications, Embed security practices, Embed security tools, Develop incident response plans, Maintain incident response plans, Develop playbooks, Maintain playbooks, Perform vulnerability assessments, Perform penetration testing, Lead incident response activities, Participate in incident response activities, Investigate incidents, Contain incidents, Eradicate incidents, Recover from incidents, Monitor security alerts, Monitor security incidents, Identify threats, Respond to threats, Collaborate with development teams, Collaborate with operations teams, Ensure security incorporation, Provide training, Provide support", "teamCollaboration" : "development teams; operations teams; technical stakeholders; non-technical stakeholders", "domainKnowledge" : "Lido Protocol; DAO; blockchain technologies; Ethereum-based networks; web3; DevOps practices; supply chain attacks", "domainList" : [ "lido-protocol", "dao", "blockchain-technologies", "ethereum-based-networks", "web3", "devops-practices", "supply-chain-attacks" ], "domainSpecificKnowledge" : [ "Lido Protocol", "DAO", "blockchain technologies", "Ethereum-based networks", "web3", "DevOps practices", "supply chain attacks" ], "toolProficiency" : [ "SIEM", "IDS/IPS", "vulnerability scanners", "automated security testing", "Docker", "Kubernetes", "GitHub Actions", "Git", "Ansible", "Terraform" ], "communicationSkills" : "articulate security concepts", "continuousLearning" : "language courses; professional growth courses", "problemSolvingSkills" : "security investigations; risk assessments", "qualificationsBasic" : "technical security assessments, code audits, design reviews, vulnerability research, Python programming, Golang programming, JavaScript programming, Bash programming, SIEM experience, IDS/IPS experience, vulnerability scanners experience, automated security testing experience, Excellent communication skills, problem-solving abilities", "qualificationsPreferred" : "blockchain technologies experience, Ethereum-based networks experience, web3 bug hunting experience, contract analysis experience, DevOps practices experience, Docker familiarity, Kubernetes familiarity, GitHub Actions familiarity, Git familiarity, Ansible familiarity, Terraform familiarity, supply chain attacks analysis, supply chain attacks prevention", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "The SecOps contributor workstream is responsible for helping the DAO to integrate security into development processes, managing incidents, and collaborating with teams. This role develops response plans, conducts assessments, and ensures effective communication of security practices. Essential skills include technical security assessments, programming, and strong communication abilities, with blockchain and DevOps experience being advantageous. RESPONSIBILITIES SECURITY INTEGRATION - Develop secure systems to protect Lido Protocol, DAO, applications, contributors, partners, and stakers. - Define processes, systems, and applications to make attacks difficult to execute and easy to detect. - Embed security practices and tools within the development pipeline. THREATS AND INCIDENT MANAGEMENT - Develop and maintain incident response plans and playbooks. - Perform regular vulnerability assessments and penetration testing. - Lead or participate in incident response activities, including investigation, containment, eradication, and recovery. - Monitor security alerts and incidents to identify and respond to threats promptly. COLLABORATION AND TRAINING - Collaborate with development and operations teams to ensure security is incorporated from design to deployment and maintenance. - Provide training and support on security tools and techniques, emphasizing soft skills like communication, negotiation, and influence. REQUIREMENTS MUST HAVE - Experience with technical security assessments, code audits, design reviews, and vulnerability research. - Proficiency in programming languages (Python, Golang, JavaScript, Bash). - Experience with security tools and technologies (SIEM, IDS/IPS, vulnerability scanners, automated security testing). - Excellent communication skills to articulate security concepts to technical and non-technical stakeholders. - Strong problem-solving abilities for security investigations and risk assessments. - English level: B2+ GOOD TO HAVE - Experience with blockchain technologies, Ethereum-based networks, web3 bug hunting, and contract analysis. - Familiarity with DevOps practices and tools (Docker, Kubernetes, GitHub Actions, Git, Ansible, Terraform). - Experience with supply chain attacks analysis and prevention. - Focus on improving real-world security, not compliance. KEY FACTORS - Contribute from anywhere in the world. - Competitive compensation level. - Flexible schedule. - Compensation for education, including language & professional growth courses. - Equipment & co-working reimbursement program.", "summaryDescription" : "SecOps Engineer. Skills: Security Integration, Incident Response, Collaboration. Develop secure systems. Define processes", "postedDate" : "2026-06-11T22:34:50.712", "createdAt" : "2026-06-11T22:34:50.712", "lastUpdated" : "2026-06-14T23:17:09.469", "ingestTimestamp" : "2026-06-11T22:34:50.712", "mongoId" : "6a2ac07574d8ee00a06f134d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "vulnerability research", "penetration testing", "incident response", "security alerts monitoring", "security practices", "security tools", "security techniques", "Negotiation", "Influence", "Security Integration", "Incident Response", "Collaboration", "technical security assessments", "code audits", "design reviews", "risk assessments", "Lido Protocol", "DAO", "blockchain technologies", "Ethereum-based networks", "web3", "DevOps practices", "supply chain attacks", "SIEM", "IDS/IPS", "vulnerability scanners", "automated security testing", "Docker", "Kubernetes", "GitHub Actions", "Git", "Ansible", "Terraform" ], "skillCount" : 33, "jobCategory" : "operations", "jobSubcategory" : "devops", "dataQualityScore" : 0.7777778, "_score" : 768.49225, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "68c2e418f8b1b0376634c36a", "title" : "Security Engineer, Incident Response, CorpSec", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:14:41.009", "fingerprint" : "1d73ed9116d8a3da3a8809fe15ae6abbeb90fed1911a7e130db33978905c1cf9", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3079013/apply", "externalId" : "6e9703e8-c44e-4f5b-9f27-1aa702f0786e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Threat hunting, Detection engineering, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, Programming language, Scripting language, Amazon Web Services", "professionalSkills" : [ "Security monitoring", "Response activities" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership", "Curiosity", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Response activities", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Curiosity" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security engineering, Threat intelligence", "majorSkillsList" : [ "Incident response", "Security engineering", "Threat intelligence" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities", "teamCollaboration" : "Global team environment; Security issues", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Threat hunting; Detection engineering; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "threat-hunting", "detection-engineering", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider" ], "toolProficiency" : [ "SOAR", "SIEM platforms" ], "communicationSkills" : "Clear communication; Accurate communication", "continuousLearning" : "Learn about security domains", "problemSolvingSkills" : "Think like attacker; Think like defender", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 3 years systems, network, or application security experience, 3 years experience on Security team, Coordinating security incident responses, Proficiency with one high-level programming or scripting language", "qualificationsPreferred" : "Experience in security operations or incident response, Experience in security automation tooling, Experience in threat intelligence, Familiarity with threat hunting, Familiarity with detection engineering, Familiarity with malware analysis, Familiarity with forensics, Familiarity with SOAR, Familiarity with SIEM platforms, Familiarity with variety of Operating Systems, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS is looking for a passionate Security Engineer, Incident Response who can lead the response to security issues across the largest cloud provider in the world. You must thrive in high-pressure situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, threat hunting, detection engineering, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. Or equivalent industry certification. - 3 years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 3 years experience on a Security team, especially experience coordinating responses to security incidents. Proficiency with one high-level programming or scripting language. Preferred Qualifications: - Experience working in security operations or incident response, security automation tooling, or threat intelligence. - Familiarity with threat hunting, detection engineering, malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS). - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Incident Response, CorpSec at Amazon.com Services LLC. Skills: Incident response, Security engineering, Threat intelligence. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T11:16:05.380", "createdAt" : "2026-06-13T11:16:05.380", "lastUpdated" : "2026-06-15T02:14:41.009", "ingestTimestamp" : "2026-06-13T11:16:05.380", "mongoId" : "68c2e418f8b1b0376634c36a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3079013/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Leadership", "Curiosity", "Critical thinking", "Incident response", "Security engineering", "Threat intelligence", "Operating system security", "Network security", "Cryptography", "Software security", "Cloud provider", "SOAR", "SIEM platforms" ], "skillCount" : 22, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 768.27386, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a305790f292fd229cf3b854", "title" : "Senior Test Automation Engineer", "company" : "Globalli", "industry" : "SaaS", "salary" : { "min" : 600000.0, "max" : 900000.0, "currency" : "MXN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Test Automation Engineer in Mexico City, Mexico, adjusted for the SaaS industry and full-time employment." }, "location" : "Mexico City, Mexico City, Mexico", "locations" : [ "Mexico City", "Mexico City", "Mexico" ], "timestamp" : "2026-06-16T08:51:32.007", "fingerprint" : "1d3b5099c7b3a0d5617cfb1c8320f4aa6696c26e4932eb5a0c32704c5b155259", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/globalli/jobs/5164983007", "externalId" : "5164983007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Mexico City", "state" : "Mexico City", "country" : "Mexico", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "19.4326296,-99.1331785" } ], "locationText" : "Mexico City, Mexico City, Mexico", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "TypeScript, Zod, Playwright, Cypress, Postman, REST-assured", "professionalSkills" : [ "Schema validation", "Test automation", "API testing", "Regression testing", "Exploratory testing", "Production validation", "Service isolation", "Testability", "Release confidence" ], "hardSkillsList" : [ "Type-safe code", "Schema-validated code", "E2E testing", "Component testing", "API test coverage", "Event-driven workflows", "Asynchronous workflows", "Microservice architectures" ], "softSkillsList" : [ "Problem-solving", "Debugging", "Pragmatic mindset" ], "hardSkills" : [ { "name" : "Type-safe code", "level" : "intermediate" }, { "name" : "Schema-validated code", "level" : "intermediate" }, { "name" : "E2E testing", "level" : "intermediate" }, { "name" : "Component testing", "level" : "intermediate" }, { "name" : "API test coverage", "level" : "intermediate" }, { "name" : "Event-driven workflows", "level" : "intermediate" }, { "name" : "Asynchronous workflows", "level" : "intermediate" }, { "name" : "Microservice architectures", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Debugging" }, { "name" : "Pragmatic mindset" } ], "majorSkills" : "Test automation, E2E testing, API testing, CI/CD integration", "majorSkillsList" : [ "Test automation", "E2E testing", "API testing", "CI/CD integration" ], "coreResponsibilities" : "Design automated E2E test suites, Implement automated E2E test suites, Maintain automated E2E test suites, Champion shift-left practices, Embed in sprint planning, Embed in story refinement, Embed in design reviews, Own regression testing, Own exploratory testing, Own production validation, Write type-safe test code, Write schema-validated test code, Build E2E tests, Build component tests, Maintain E2E tests, Maintain component tests, Integrate automated test suites, Design API test coverage, Execute API test coverage, Test event-driven workflows, Test asynchronous workflows, Identify gaps in coverage, Prioritize coverage gaps, Drive resolution of gaps, Contribute to shared standards, Contribute to tooling decisions, Contribute to documentation, Identify bugs, Track bugs, Triage bugs, Mentor engineers on testability, Mentor engineers on release confidence", "teamCollaboration" : "QA team; Product owners; Developers; Cross-functional teams", "projectManagementSkills" : [ "Agile", "Scrum" ], "domainKnowledge" : "HR and payroll platform; B2B SaaS platform; RESTful interfaces; Event-driven interfaces; Microservice architectures; Compliance-heavy domains; Fintech domains; Payroll domains; GDPR; SOC 2 readiness", "domainList" : [ "hr-and-payroll-platform", "b2b-saas-platform", "restful-interfaces", "event-driven-interfaces", "microservice-architectures", "compliance-heavy-domains", "fintech-domains", "payroll-domains", "gdpr", "soc-2-readiness" ], "domainSpecificKnowledge" : [ "HR and payroll platform", "B2B SaaS platform", "RESTful interfaces", "Event-driven interfaces", "Microservice architectures", "Compliance-heavy domains", "Fintech domains", "Payroll domains", "GDPR", "SOC 2 readiness" ], "toolProficiency" : [ "Jira", "Xray", "GitHub Copilot", "Claude", "Cursor", "Jenkins" ], "documentationSkills" : "Documentation; Bug reports", "problemSolvingSkills" : "Problem-solving; Debugging; Root cause analysis", "qualificationsBasic" : "4+ years test automation experience, TypeScript skills, Playwright or Cypress experience, Zod or schema-validation libraries familiarity, STLC expertise, Testing patterns and architectures expertise, End-to-end test design strategies expertise, API testing expertise, Postman or REST-assured expertise, Bug tracking and test management tools expertise, Microservice architectures practical experience, Agile/Scrum ceremonies comfort, Third-party integration points testing ability, Problem-solving skills, Debugging skills, Clear bug reports writing ability, Reproducible bug reports writing ability, Well-prioritized bug reports writing ability, Experience mentoring engineers, Experience coaching engineers, AI-assisted development tools familiarity, Bilingual English/Spanish", "qualificationsPreferred" : "Payroll experience, Fintech experience, Compliance-heavy domains experience, Contract testing concepts understanding, Contract testing tools understanding, Security testing exposure, Privacy testing exposure, Performance testing tools familiarity, Load testing tools familiarity, Observability tools familiarity, Production monitoring tools familiarity, Jenkins configuration familiarity, Pipeline authoring familiarity", "workSiteFlexibility" : "Onsite", "rawDescription" : "We are looking for a Senior Test Automation Engineer to join our Quality Engineering team and help us raise the bar on software quality across a global HR and payroll platform, a complex, distributed B2B SaaS platform. You will work closely with product owners from the earliest stages of development, own automation coverage across frontend, backend, and microservice boundaries, and play a hands-on role in evolving our testing infrastructure. What You’ll Do Design, implement, and maintain automated E2E test suites covering UI, API, and third-party integration points. Champion shift-left practices by embedding in sprint planning, story refinement, and design reviews to catch quality risks early. Own regression testing, exploratory testing, and production validation across critical product workflows. Write type-safe, schema-validated test code using TypeScript and Zod to minimize false positives and improve maintainability. Build and maintain E2E and component tests with Playwright/Cypress, covering critical user flows and edge cases. Integrate automated test suites into CI/CD pipelines to ensure fast, reliable feedback to developers. Design and execute API test coverage using Postman and REST-assured. Test event-driven and asynchronous workflows across microservice boundaries. Identify gaps in coverage, prioritize them against risk, and drive resolution with a pragmatic mindset. Collaborate in a QA team, contributing to shared standards, tooling decisions, and documentation. Identify, track, and triage bugs using tools like Jira and Xray. Mentor engineers on testability and release confidence. What You'll Bring 4+ years of hands-on test automation experience in production software environments. Strong TypeScript skills: you write test code that is clean, readable, and easy to extend. Solid experience with Playwright or Cypress for E2E, both UI and API testing. Familiarity with Zod or other runtime schema-validation libraries. Hands-on expertise across the whole STLC, including testing patterns and architectures (e.g., Page Object Model, fixtures and factories, data-driven testing) and end-to-end test design strategies. API testing expertise with Postman and/or REST-assured across RESTful and event-driven interfaces. Hands-on experience with bug tracking and test management tools (Jira, Xray, or equivalent). Practical experience testing microservice architectures, including service isolation strategies. Comfortable working within Agile/Scrum ceremonies (sprint planning, refinement, design reviews) and collaborating directly with product owners and developers. Ability to test third-party integration points and design robust strategies around external dependencies. Excellent problem-solving and debugging skills, with the ability to write clear, reproducible, and well-prioritized bug reports. Experience mentoring or coaching engineers on testing practices and quality ownership. Familiarity with current AI-assisted development tools (e.g., GitHub Copilot, Claude, Cursor) and sound judgment on where AI fits in the testing workflow, accelerating delivery without compromising rigor or ownership. A proactive, detail-oriented mindset that thrives in fast-paced, high-ownership environments. Bilingual English/Spanish (written and verbal). Nice to have Experience in payroll, fintech, or other compliance-heavy domains. Understanding of contract testing concepts and tools. Exposure to security and privacy testing (e.g., GDPR, SOC 2 readiness). Familiarity with performance and load testing tools (e.g., k6, JMeter, Gatling). Experience with observability or production monitoring tools (Datadog, Grafana, Sentry, or equivalent). Comfort working in distributed, asynchronous teams across multiple time zones. Familiarity with Jenkins configuration and pipeline authoring.", "summaryDescription" : "Senior Test Automation Engineer at Globalli. Skills: Test automation, E2E testing, API testing, CI/CD integration. Design automated E2E test suites. Implement automated E2E test suites", "postedDate" : "2026-06-15T23:24:40.248", "createdAt" : "2026-06-15T23:24:40.248", "lastUpdated" : "2026-06-16T08:51:32.007", "ingestTimestamp" : "2026-06-15T23:24:40.248", "mongoId" : "6a305790f292fd229cf3b854", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Type-safe code", "Schema-validated code", "E2E testing", "Component testing", "API test coverage", "Event-driven workflows", "Asynchronous workflows", "Microservice architectures", "Problem-solving", "Debugging", "Pragmatic mindset", "Test automation", "API testing", "CI/CD integration", "Schema validation", "Regression testing", "Exploratory testing", "Production validation", "Service isolation", "Testability", "Release confidence", "Agile", "Scrum", "HR and payroll platform", "B2B SaaS platform", "RESTful interfaces", "Event-driven interfaces", "Compliance-heavy domains", "Fintech domains", "Payroll domains", "GDPR", "SOC 2 readiness", "Jira", "Xray", "GitHub Copilot", "Claude", "Cursor", "Jenkins" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 725.38, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "694ae6ce70f0b99d589b2804", "title" : "Security Operations and Incident Response Manager", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Security Operations and Incident Response in Irvine, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T08:40:47.148", "fingerprint" : "d5f865261d9c50964a8d89f96af400da1cdb2f3eecdc20e0391203f2e5cc71a5", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=105024", "externalId" : "105024", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "SIEM, EDR, Threat intelligence, Ransomware, Phishing, Account takeover, Forensic analysis, Automation, Cloud security, AWS, Azure, Google Cloud, Oracle Cloud, Python, PowerShell", "professionalSkills" : [ "Incident response", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance" ], "hardSkillsList" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning" ], "softSkillsList" : [ "Analytical mindset", "Leadership" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Post-incident review", "level" : "intermediate" }, { "name" : "Tool configuration", "level" : "intermediate" }, { "name" : "Detection rule tuning", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "Cloud monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical mindset" }, { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Threat detection, SIEM management", "majorSkillsList" : [ "Incident response", "Security operations", "Threat detection", "SIEM management" ], "coreResponsibilities" : "Monitor security events, Analyze security events, Detect threats, Respond to threats, Tune SIEM rules, Optimize SIEM ingestion, Leverage threat intelligence, Analyze financial threats, Develop detection strategies, Triage security alerts, Correlate data, Escalate critical incidents, Lead incident response, Support incident response, Perform forensic investigations, Document findings, Create incident response playbooks, Maintain incident response playbooks, Conduct post-incident reviews, Recommend improvements, Update security controls, Coordinate with MSSP partners, Validate escalations, Provide tuning feedback, Manage security tools, Configure security tools, Ensure tool performance, Ensure tool coverage, Develop detection rules, Tune detection rules, Develop alerts, Tune alerts, Implement automation responses, Streamline tasks, Monitor cloud environments, Secure cloud environments, Protect financial data, Protect workloads, Integrate security tools, Partner with vulnerability management, Partner with IAM teams, Collaborate with IT Infrastructure, Collaborate with IT Application Teams, Collaborate with DevOps, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Integrate security operations, Conduct vulnerability scans", "teamCollaboration" : "Cross-functional collaboration; Collaborate with IT Infrastructure; Collaborate with IT Application Teams; Collaborate with DevOps; Collaborate with IAM; Collaborate with DLP; Collaborate with Application Security; Collaborate with threat intelligence; Collaborate with vulnerability management; Collaborate with engineering teams; Collaborate with cybersecurity architecture; Collaborate with cybersecurity engineering", "domainKnowledge" : "Financial systems; Cybersecurity; Cloud environments; MITRE framework", "domainList" : [ "financial-systems", "cybersecurity", "cloud-environments", "mitre-framework" ], "domainSpecificKnowledge" : [ "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework" ], "toolProficiency" : [ "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "communicationSkills" : "Communicate risk; Communicate operational performance; Documentation skills", "documentationSkills" : "Document findings", "continuousLearning" : "Continuous learning; Staying ahead of threats; Tuition reimbursement", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Work at home, Office environment", "outcomesObjectives" : "Reduce false positives; Improve detection fidelity; Enhance detection strategies; Prevent recurrence", "qualificationsBasic" : "5+ years experience, Experience with SIEM platforms, Experience with EDR, Experience with threat intelligence platforms, Experience with incident response lifecycle, Experience with cybersecurity metrics, Experience with KPIs, Experience communicating risk, Experience communicating operational performance, Experience with cloud environments, Experience with automation scripts, Experience with vulnerability scanners, Experience with firewalls", "qualificationsPreferred" : "Experience with Splunk, Experience with NGSIEM, Experience with AWS, Experience with Azure, Experience with Google Cloud, Experience with Oracle Cloud, Experience with Python, Experience with PowerShell", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Security Operations & Incident Response (SOIR) Manager is responsible for the enterprise-wide incident response function within the Security Operations Center (SOC), ensuring rapid detection, containment, and remediation of cybersecurity threats. This role is pivotal in maintaining the integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role will oversee 3 rd party vendor of incident responders and collaborate with threat intelligence, vulnerability management, and engineering teams to drive continuous improvement in detection and response capabilities. In addition, this role will create and maintain incident response playbooks and establish processes for proactive threat hunting, as well as be responsible for administration and day-to-day support of HCA EDR, SIEM, and HCA Monitoring, Threat detection, and remediation tools. What You Will Do 1. Security Monitoring & Threat Detection : · Monitor and analyze security events in real-time using SIEM platforms (e.g., Splunk, NGSIEM etc.) to detect and respond to threats targeting financial systems, such as ransomware, phishing, or account takeover. · Tune and optimize SIEM correlation rules and ingestion pipelines to reduce false positives and improve detection fidelity. · Leverage threat intelligence platforms to analyze emerging financial-specific threats, correlate intelligence with internal data, and develop actionable insights to enhance detection and prevention strategies. 2. Incident Response & Remediation : · Alert Triage: Investigate and triage security alerts, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. · Incident Handling: Lead and support incident response activities, including containment, eradication, and recovery, for security incidents spanning the MITRE framework. · Forensic Analysis: Perform forensic investigations to determine the root cause of incidents, and document findings for audits and legal purposes. · Playbook Development: Create and maintain incident response playbooks, ensuring rapid and consistent response processes. · Post-Incident Review: Conduct post-Incident reviews to identify lessons learned, recommend improvements, and update security controls to prevent recurrence. · Coordinate with MSSP partners in a co-managed SIEM/SOC model to validate escalations and provide tuning feedback. 3. Tool Administration and Management of SOC Solutions : · Tool Administration: Manage and configure security tools, including SIEM, EDR, firewalls, and vulnerability scanners, to ensure optimal performance and coverage. · Rule Tuning: Develop and tune detection rules, signatures, and alerts to reduce false positives and improve detection accuracy in financial environments. · Automation: Implement automation responses (e.g. SOUR) scripts (e.g., Python, PowerShell) to streamline tasks like alert enrichment, incident triage, or vulnerability scans. · Cloud Security Monitoring: Monitor and secure cloud environments (e.g., AWS, Azure, Google Cloud, Oracle Cloud) using native security tools and third-party integrations, protecting financial data and workloads. · Collaborate with cybersecurity architecture & engineering team to ensure proper integration of security tools across cloud, network, and endpoint environments. · Partner with vulnerability management and IAM teams to ensure holistic security coverage. 4. Collaboration, Automation, and Innovation Activities : · Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application Teams, DevOps, IAM, DLP, and Application Security teams to integrate security operations with broader cybersecurity initiatives, such as cloud migrations or fintech development. · Vulnerability Management: Collaborate with Vulnerability Management team to conduct regular vulnerability scans across networks, systems, and applications to identify weaknesses, such as unpatched software or misconfigurations and support the patching management and/or adequate remediation plan. 5. Documentation, Reporting, and Compliance Activities : · Incident Documentation: Document security incidents, investigations, and remediation actions in detail to support audits, compliance, and lessons learned. · Vulnerability and Penetration Test Reports: Produce comprehensive reports on vulnerability scans and penetration tests, including risk assessments, remediation plans, and validation results. · Metrics and Reporting: Develop and report on SOC metrics (e.g., Mean Time to Detect, Mean Time to Respond, vulnerability remediation rates, penetration test coverage) to demonstrate operational effectiveness. · Runbooks and Procedures: Maintain and update SOC runbooks, standard operating procedures (SOPs), and knowledge bases for incident response, vulnerability management, and penetration testing. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes; including 3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR) · Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) · Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures · Bachelor’s degree in Computer Science, Information Security, or related field · Master’s degree preferred · Certification in one of the following: CISSP, CCSP, CISM, TOGAF or equivalent · Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary · Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. · Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs) · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership · Demonstrated expertise in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review · Analytical mindset with attention to detail · Excellent communication and documentation skills · Ability to work under pressure and manage multiple incidents simultaneously · Passion for continuous learning and staying ahead of emerging threats Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Security Operations and Incident Response Manager at Hyundai Capital America. Skills: Incident response, Security operations, Threat detection, SIEM management. Monitor security events. Analyze security events", "createdAt" : "2026-06-14T08:13:57.992", "lastUpdated" : "2026-06-15T08:40:47.148", "ingestTimestamp" : "2026-06-14T08:13:57.992", "mongoId" : "694ae6ce70f0b99d589b2804", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning", "Analytical mindset", "Leadership", "Incident response", "Security operations", "SIEM management", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance", "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework", "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "_score" : 723.17755, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307946f292fd229c030df2", "title" : "Senior Test Automation Engineer", "company" : "Solvd Inc.", "industry" : "Agentic Software Engineering", "salary" : { "min" : 125000.0, "max" : 175000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Test Automation Engineer in Georgia, United States, adjusted for seniority and industry." }, "location" : "Georgia", "locations" : [ "Georgia", "Ukraine", "Poland" ], "timestamp" : "2026-06-16T12:44:31.486", "fingerprint" : "1f59ebb897874f06bb41e5ca01f422a61dff415a5bd656d854df45b291c6188e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Solvd/f091efe4-e6fd-4fc9-bfad-02629ae0624b/application", "externalId" : "f091efe4-e6fd-4fc9-bfad-02629ae0624b", "industryFunction" : { }, "structuredLocations" : [ { "state" : "Georgia", "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "Georgia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "Solvd Inc. is a rapidly growing AI-native consulting and technology services firm delivering enterprise transformation across cloud, data, software engineering, and artificial intelligence. We work with industry-leading organizations to design, build, and operationalize technology solutions that drive measurable business outcomes. Following the acquisition of Tooploox, a premier AI and product development company, Solvd now offers true end-to-end delivery—from strategic advisory and solution design to custom AI development and enterprise-scale implementation. Our capability centers combine deep technical expertise, proven delivery methodologies, and sector-specific knowledge to address complex business challenges quickly and effectively. We are looking for an experienced Senior QA Automation Engineer to join a high-priority payment platform migration engagement. You'll be building automation coverage from the ground up — ahead of manual QA, ahead of development milestones — as the team migrates from legacy payment processors to a modern global payment platform. This is a shift-left engagement where automation isn't a follow-up activity; it's the foundation everything else is built on. The scope spans end-to-end, integration, and API-level testing across payment flows touching an OMS, an e-commerce platform, and returns processing systems. Go-live is a hard deadline with war room support expected through hypercare. Working hours: 8am - 4pm EST (US time) WHAT YOU'LL DO - Design, develop, and maintain automated test frameworks and scripts in Java and/or JavaScript across the full payment migration scope. - Build test suites ahead of manual QA activity and development milestones — automation-first, not automation-after. - Build and maintain end-to-end, integration, and API-level tests covering payment flows across OMS, Salesforce Commerce Cloud, and returns/kit processing systems. - Validate payment-specific scenarios through automation: transactions, token migration, refunds, chargebacks, and edge cases across all integrated systems. - Integrate automated test suites into the CI/CD pipeline for continuous feedback and early defect detection. - Work closely with the QE Lead to align on coverage priorities, execution schedules, and reporting cadences. - Maintain clear documentation of frameworks, coverage, and results to feed into daily and weekly status reporting. - Support automation coverage expansion for additional workstreams pending scope confirmation. - Participate in end-to-end testing sessions and remain available for war room support through go-live and hypercare. WHAT YOU BRING - 4+ years of hands-on QA automation experience. - Proficiency in Java and/or JavaScript for building and maintaining test automation frameworks. - Strong API test automation skills — essential for validating payment integrations and transaction flows. - Demonstrated shift-left experience: building automation early in the cycle, not as a follow-up to manual testing. - CI/CD integration experience — able to plug test suites into existing pipelines for continuous execution. - Comfortable working within a structured QA workstream, following coverage priorities and reporting to a QE Lead. PREFERRED QUALIFICATIONS - Experience with Salesforce Commerce Cloud test automation — would significantly reduce ramp-up time. - Familiarity with Adyen, Braintree, or Stripe — payment platform knowledge is a plus; strong documentation makes this learnable on the job. - Prior exposure to payment platform migrations or token transfer validation at any QA level. - OMS automation experience given order management is a core system in scope. When you join Solvd, you'll… - Shape real-world AI-driven projects across key industries, working with clients from startup innovation to enterprise transformation. - Be part of a global team with equal opportunities for collaboration across continents and cultures. - Thrive in an inclusive environment that prioritizes continuous learning, innovation, and ethical AI standards. Ready to make an impact? If you're excited to build things that matter, champion responsible AI, and grow with some of the industry’s sharpest minds. Apply today and let’s innovate together. Solvd is an equal opportunity employer.", "summaryDescription" : "Senior Test Automation Engineer at Solvd Inc.", "createdAt" : "2026-06-16T01:59:46.244", "lastUpdated" : "2026-06-16T12:44:31.486", "ingestTimestamp" : "2026-06-16T01:59:46.244", "mongoId" : "6a307946f292fd229c030df2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 125000, "salaryAnnualMax" : 175000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 721.101, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69cf3f052beec4dd3d9340a4", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect" ], "timestamp" : "2026-06-15T08:10:44.516", "fingerprint" : "e7b6067f8d5e1ee3cf111fd915ee7bae8c724b95799fbd946bdb1b7400dc7409", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382311/apply", "externalId" : "49079c29-efa4-48bb-96db-5c916f303463", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Java, C++, HTTP(S), DNS, TCP/IP, Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, AWS", "professionalSkills" : [ "Risk assessment", "Security engineering" ], "hardSkillsList" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System tooling development", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design cohesive responses, Coordinate responses across teams, Build security utilities, Build security tools, Communicate effectively", "teamCollaboration" : "Multiple teams across organization; Fellow Security Engineers", "domainKnowledge" : "Cloud security; National security; Cryptography; Network security; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; AWS services", "domainList" : [ "cloud-security", "national-security", "cryptography", "network-security", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "aws-services" ], "domainSpecificKnowledge" : [ "Cloud security", "National security", "Cryptography", "Network security", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "AWS services" ], "toolProficiency" : [ "Splunk", "ELK" ], "communicationSkills" : "Communicate at multiple levels; Communicate to multiple audiences", "problemSolvingSkills" : "Think like attacker; Think like defender; Mitigate risks", "specialRequirements" : "US Citizen, TS/SCI with polygraph, On-call responsibilities", "qualificationsBasic" : "Bachelor's degree or CCSP or CEH or CFR or Cloud+ or CySA+ or GCED or GICSP or PenTest+, 2+ years scripting or programming or security code review, Knowledge of networking protocols, Current, active US Government Security Clearance of TS/SCI with Polygraph", "qualificationsPreferred" : "AWS certification, Cloud Technology Certification, Knowledge of web protocols, Knowledge of common attacks, Knowledge of Linux/Unix tools, Knowledge of Linux/Unix architecture, Deep understanding of AWS service catalog, Used AWS services in production, Experience with log analysis systems, Familiarity with Windows logging systems, Familiarity with Linux logging systems, Understanding of high-level cryptography principles", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+ - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or Cloud Technology Certification - Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture - Deep understanding of the AWS service catalog. Ideally, you have used AWS services in a production capacity. - Experience with log analysis systems, like Splunk or ELK. - Familiarity with Windows and Linux logging systems. - Understanding of high-level cryptography principles (PKI, encryption algorithms, etc) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T14:00:19.237", "createdAt" : "2026-06-13T14:00:19.237", "lastUpdated" : "2026-06-15T08:10:44.516", "ingestTimestamp" : "2026-06-13T14:00:19.237", "mongoId" : "69cf3f052beec4dd3d9340a4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382311/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence", "Leadership", "Cloud security", "Security engineering", "National security", "AWS services", "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect", "Splunk", "ELK" ], "skillCount" : 34, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 718.6201, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Security" }, { "id" : "6a305ed9f292fd229cf74f13", "title" : "Senior Test Automation Engineer", "company" : "Solvd Inc.", "industry" : "Agentic Software Engineering", "salary" : { "min" : 125000.0, "max" : 175000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Test Automation Engineer in Georgia, United States, adjusted for seniority and industry." }, "location" : "Georgia", "locations" : [ "Georgia", "Ukraine", "Poland" ], "timestamp" : "2026-06-16T09:51:21.003", "fingerprint" : "ac4864a9b5ac1de239408fe4abd785e3da3d898e05777d89d7daf17259bd6386", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/solvd/f091efe4-e6fd-4fc9-bfad-02629ae0624b/application", "externalId" : "f091efe4-e6fd-4fc9-bfad-02629ae0624b", "industryFunction" : { }, "structuredLocations" : [ { "state" : "Georgia", "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "Georgia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "Solvd Inc. is a rapidly growing AI-native consulting and technology services firm delivering enterprise transformation across cloud, data, software engineering, and artificial intelligence. We work with industry-leading organizations to design, build, and operationalize technology solutions that drive measurable business outcomes. Following the acquisition of Tooploox, a premier AI and product development company, Solvd now offers true end-to-end delivery—from strategic advisory and solution design to custom AI development and enterprise-scale implementation. Our capability centers combine deep technical expertise, proven delivery methodologies, and sector-specific knowledge to address complex business challenges quickly and effectively. We are looking for an experienced Senior QA Automation Engineer to join a high-priority payment platform migration engagement. You'll be building automation coverage from the ground up — ahead of manual QA, ahead of development milestones — as the team migrates from legacy payment processors to a modern global payment platform. This is a shift-left engagement where automation isn't a follow-up activity; it's the foundation everything else is built on. The scope spans end-to-end, integration, and API-level testing across payment flows touching an OMS, an e-commerce platform, and returns processing systems. Go-live is a hard deadline with war room support expected through hypercare. Working hours: 8am - 4pm EST (US time) WHAT YOU'LL DO - Design, develop, and maintain automated test frameworks and scripts in Java and/or JavaScript across the full payment migration scope. - Build test suites ahead of manual QA activity and development milestones — automation-first, not automation-after. - Build and maintain end-to-end, integration, and API-level tests covering payment flows across OMS, Salesforce Commerce Cloud, and returns/kit processing systems. - Validate payment-specific scenarios through automation: transactions, token migration, refunds, chargebacks, and edge cases across all integrated systems. - Integrate automated test suites into the CI/CD pipeline for continuous feedback and early defect detection. - Work closely with the QE Lead to align on coverage priorities, execution schedules, and reporting cadences. - Maintain clear documentation of frameworks, coverage, and results to feed into daily and weekly status reporting. - Support automation coverage expansion for additional workstreams pending scope confirmation. - Participate in end-to-end testing sessions and remain available for war room support through go-live and hypercare. WHAT YOU BRING - 4+ years of hands-on QA automation experience. - Proficiency in Java and/or JavaScript for building and maintaining test automation frameworks. - Strong API test automation skills — essential for validating payment integrations and transaction flows. - Demonstrated shift-left experience: building automation early in the cycle, not as a follow-up to manual testing. - CI/CD integration experience — able to plug test suites into existing pipelines for continuous execution. - Comfortable working within a structured QA workstream, following coverage priorities and reporting to a QE Lead. PREFERRED QUALIFICATIONS - Experience with Salesforce Commerce Cloud test automation — would significantly reduce ramp-up time. - Familiarity with Adyen, Braintree, or Stripe — payment platform knowledge is a plus; strong documentation makes this learnable on the job. - Prior exposure to payment platform migrations or token transfer validation at any QA level. - OMS automation experience given order management is a core system in scope. When you join Solvd, you'll… - Shape real-world AI-driven projects across key industries, working with clients from startup innovation to enterprise transformation. - Be part of a global team with equal opportunities for collaboration across continents and cultures. - Thrive in an inclusive environment that prioritizes continuous learning, innovation, and ethical AI standards. Ready to make an impact? If you're excited to build things that matter, champion responsible AI, and grow with some of the industry’s sharpest minds. Apply today and let’s innovate together. Solvd is an equal opportunity employer.", "summaryDescription" : "Senior Test Automation Engineer at Solvd Inc.", "createdAt" : "2026-06-16T00:26:18.654", "lastUpdated" : "2026-06-16T09:51:21.003", "ingestTimestamp" : "2026-06-16T00:26:18.654", "mongoId" : "6a305ed9f292fd229cf74f13", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 125000, "salaryAnnualMax" : 175000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 716.4036, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6c5b74d8ee00a0918506", "title" : "Senior Automation Engineer", "company" : "SmithRx", "industry" : "Healthcare", "salary" : { "min" : 72000.0, "max" : 108000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Automation Engineer in Bulgaria, adjusted for the health-tech industry and remote work." }, "location" : "Remote", "locations" : [ "Remote" ], "timestamp" : "2026-06-16T04:40:57.822", "fingerprint" : "ed4bb0601866946a0235e60816cbee9fb25d6c88a2678c0680e18618d6154e8c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/smithrx/jobs/8586259002", "externalId" : "8586259002", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Typescript, Java, Javascript, API automation, Selenium, Cypress, Playwright, Page Object Model, CI/CD, GitHub Actions, CircleCI, Jenkins", "professionalSkills" : [ "Team leadership", "Product knowledge", "Quality standards" ], "hardSkillsList" : [ "Automation testing", "API testing", "Regression testing", "Security testing", "Performance testing" ], "hardSkills" : [ { "name" : "Automation testing", "level" : "intermediate" }, { "name" : "API testing", "level" : "intermediate" }, { "name" : "Regression testing", "level" : "intermediate" }, { "name" : "Security testing", "level" : "intermediate" }, { "name" : "Performance testing", "level" : "intermediate" } ], "majorSkills" : "Automation testing, Test strategy, Quality advocacy", "majorSkillsList" : [ "Automation testing", "Test strategy", "Quality advocacy" ], "coreResponsibilities" : "Develop automated tests, Maintain automated tests, Ensure high test coverage, Provide fast feedback, Maintain test frameworks, Improve test frameworks, Manage test strategy, Manage product testing, Manage planning, Create testing documentation, Create test plans, Create test cases, Find bugs, Report bugs, Track bugs, Collaborate with Product team, Provide insight, Provide input, Create features, Provide test results, Manage project expectations, Manage project progress, Create security tests, Create performance tests, Develop product expertise, Utilize AI tools, Refine quality metrics, Track product health, Communicate product health", "teamCollaboration" : "Embedded in sprint team; Collaborate with Product team; Provide results to Development; Provide results to Product", "projectManagementSkills" : [ "Sprint planning" ], "domainKnowledge" : "Pharmacy Benefit Management; Health-Tech", "domainList" : [ "pharmacy-benefit-management", "health-tech" ], "domainSpecificKnowledge" : [ "Pharmacy Benefit Management", "Health-Tech" ], "toolProficiency" : [ "Playwright MCP", "Claude", "Copilot", "GitHub Actions", "CircleCI", "Jenkins" ], "communicationSkills" : "Clear test results", "documentationSkills" : "Test plans; Test cases; Testing documentation", "continuousLearning" : "Professional development; Training opportunities", "problemSolvingSkills" : "Finding defects", "qualificationsBasic" : "5+ years of experience in QA, Demonstrated track record of team leadership, Experience with Python, Typescript, Java, or Javascript, Experience writing automated tests for APIs, Experience with API automation frameworks, Experience with automation frameworks, Familiarity with Page Object Model, Familiarity with CI/CD systems", "qualificationsPreferred" : "Master's degree", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Who We Are: SmithRx is a rapidly growing, venture-backed Health-Tech company. Our mission is to disrupt the expensive and inefficient Pharmacy Benefit Management (PBM) sector by building a next-generation drug acquisition platform driven by cutting edge technology, innovative cost saving tools, and best-in-class customer service. With hundreds of thousands of members onboarded since 2016, SmithRx has a solution that is resonating with clients all across the country. We pride ourselves for our mission-driven and collaborative culture that inspires our employees to do their best work. We believe that the U.S healthcare system is in need of transformation, and we come to work each day dedicated to making that change a reality. At our core, we are guided by our company values: Integrity: Our purpose guides our actions and gives us confidence in the path ahead. With unwavering honesty and dependability, we embrace the pressure of challenging the old and exemplify ethical leadership to create the new. Courage: We face continuous challenges with grit and resilience. We embrace the discomfort of the unknown by balancing autonomy with empathy, and ownership with vulnerability. We boldly challenge the status quo to keep moving forward—always. Together: The success of SmithRx reflects the strength of our partnerships and the commitment of our team. Our shared values bind us together and make us one. When one falls, we all fall; when one rises, we all rise. Job Summary: The Engineering team at SmithRx is developing the next-generation modern pharmacy benefits management (PBM) platform that will change how companies administer and manage pharmacy benefits. Our unified technology platform provides real-time actionable insights that drives cost savings, powers clinical services and results in a brilliant customer experience. A unified technology platform exists nowhere in the pharmacy benefit ecosystem to programmatically solve widespread deficiencies. The result is a PBM delivering unmatched service quality and operational efficiencies that exceeds all industry standards. As a Senior Automation Engineer you will have responsibility for the overall test strategy of the products you test. You have an automation-first mindset, leveraging your experience to determine where to add tests to best maximize impact. You will create automated tests to help build and improve our regression test suites. Not only will you help maintain these frameworks, but you will constantly look to improve them so they are reliable, efficient, and easy to use. While embedded in your sprint team you will be the primary quality advocate who champions best practices in testing, develops deep product knowledge, and consistently delivers high quality code to our users. You will help maintain and improve our quality standards, constantly raise the bar, and show a passion for finding defects before they are shipped. What you will do: Develop and maintain automated tests to help ensure high test coverage and fast feedback on defects Continuously maintain and improve our test frameworks Manage test strategy, product testing, and planning within your sprint team Create testing-related documentation including test plans and test cases Find and report bugs and track these to resolution in a timely manner Collaborate with the Product team to provide valuable insight and input to help create impactful features Provide clear test results to Development and Product teams to help manage project expectations/progress Create and maintain security and performance tests Develop deep expertise in the SmithRx products Utilize AI tools like Playwright MCP, Claude, and Copilot to realize efficiencies in your daily work Maintain and refine quality metrics to help track and communicate overall product health What you will bring to SmithRx: Bachelors Degree in Computer Science or equivalent work experience 5+ years of experience in QA and automation testing with a demonstrated track record of team leadership Experience with one of the following languages: Python, Typescript, Java, or Javascript Experience with writing automated tests for API’s in a scripting or programming language Experience with API automation frameworks such as Pytest or REST Assured Experience with automation frameworks such as Selenium, Cypress, or Playwright Familiarity with Page Object Model for UI automation Familiarity with CI/CD systems such as GitHub Actions, CircleCI, or Jenkins What SmithRx Offers You: Highly competitive wellness benefits including Medical, Pharmacy, Dental, Vision, and Life Insurance and AD&D Insurance Flexible Spending Benefits 401(k) Retirement Savings Program Short-term and long-term disability Discretionary Paid Time Off Paid Company Holidays Wellness Benefits Commuter Benefits Paid Parental Leave benefits Employee Assistance Program (EAP) Well-stocked kitchen in office locations Professional development and training opportunities", "summaryDescription" : "Senior Automation Engineer at SmithRx. Skills: Automation testing, Test strategy, Quality advocacy. Develop automated tests. Maintain automated tests", "postedDate" : "2026-06-14T21:46:53.024", "createdAt" : "2026-06-14T21:46:53.024", "lastUpdated" : "2026-06-16T04:40:57.822", "ingestTimestamp" : "2026-06-14T21:46:53.024", "mongoId" : "6a2c6c5b74d8ee00a0918506", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Automation testing", "API testing", "Regression testing", "Security testing", "Performance testing", "Test strategy", "Quality advocacy", "Team leadership", "Product knowledge", "Quality standards", "Sprint planning", "Pharmacy Benefit Management", "Health-Tech", "Playwright MCP", "Claude", "Copilot", "GitHub Actions", "CircleCI", "Jenkins" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 715.377, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Health-Tech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c68fa74d8ee00a09057f9", "title" : "Assistant Manager, Cybersecurity Incident Response", "company" : "telecommunications organization", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager-level Cybersecurity Incident Response Assistant Manager in Kuala Lumpur, Malaysia, adjusted for the telecommunications industry." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "certifications" : [ "CISSP", "GCIH", "GCIA", "CEH", "Elastic Certified Engineer" ], "timestamp" : "2026-06-15T07:44:00.220", "fingerprint" : "56e79a26aaf2e95b5e453b798552e77ada7580d02d519917696520bc1ab763d7", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f736808f-ea19-4fe2-8933-8ca7e3e0efd4/application", "externalId" : "f736808f-ea19-4fe2-8933-8ca7e3e0efd4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 8, "experienceLevel" : "Manager", "technicalSkills" : "Elastic SIEM, Elastic Stack, Elasticsearch, Logstash, Kibana, Beats, EDR, Cloud platforms", "professionalSkills" : [ "Incident management", "Detection engineering", "Use case development", "Stakeholder coordination", "Incident reporting", "Operational excellence", "Threat detection", "Root cause analysis", "Lessons learned" ], "hardSkillsList" : [ "Log analysis", "Event correlation", "Rule creation", "Rule tuning", "Integration efforts" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Event correlation", "level" : "intermediate" }, { "name" : "Rule creation", "level" : "intermediate" }, { "name" : "Rule tuning", "level" : "intermediate" }, { "name" : "Integration efforts", "level" : "intermediate" } ], "majorSkills" : "Incident Response, SIEM administration, Detection Engineering", "majorSkillsList" : [ "Incident Response", "SIEM administration", "Detection Engineering" ], "coreResponsibilities" : "Manage cybersecurity incidents, Achieve MTTD benchmarks, Achieve MTTR benchmarks, Administer Elastic SIEM platform, Create detection rules, Tune detection rules, Integrate SIEM, Develop detection use cases, Escalate incidents, Coordinate with stakeholders, Report incidents, Monitor alerts, Triage alerts, Investigate alerts, Refine SIEM rules, Manage Elastic Stack components, Lead integration efforts, Collaborate with IT teams, Collaborate with Network teams, Collaborate with Cloud teams, Present incident findings, Present root cause analyses, Present remediation plans, Document playbooks, Enhance SOPs, Conduct post-incident reviews, Implement lessons learned", "teamCollaboration" : "Internal stakeholders; External stakeholders; Data Engineering teams; Architecture teams; Security teams; Infrastructure teams; Tooling teams; IT teams; Network teams; Cloud teams", "domainKnowledge" : "Cybersecurity incidents; Threat patterns; Attack patterns; MITRE ATT&CK", "domainList" : [ "cybersecurity-incidents", "threat-patterns", "attack-patterns", "mitre-att-ck" ], "domainSpecificKnowledge" : [ "Cybersecurity incidents", "Threat patterns", "Attack patterns", "MITRE ATT&CK" ], "toolProficiency" : [ "Elastic SIEM", "Elastic Stack", "EDR", "Ticketing systems" ], "communicationSkills" : "Incident reporting; Incident discussions", "documentationSkills" : "Incident response playbooks; Standard operating procedures", "problemSolvingSkills" : "Incident investigation; Log analysis; Event correlation; Root cause analysis", "outcomesObjectives" : "Achieve MTTD benchmarks; Achieve MTTR benchmarks; Strengthen security posture", "qualificationsBasic" : "5-8 years experience, SIEM administration, Elastic Stack environments, Incident triage, Log analysis, Detection rule engineering, MITRE ATT&CK-aligned use cases, Cross-department collaboration, Incident coordination, Presentation experience, Communication experience", "qualificationsPreferred" : "CISSP, GCIH, GCIA, CEH, Elastic Certified Engineer", "remoteFriendly" : true, "rawDescription" : "We are currently partnering with a leading technology-driven telecommunications organization that is scaling rapidly to support new digital initiatives and platforms. As part of this expansion, multiple roles are open across key functions to help build, maintain, and enhance next-generation solutions. This opportunity offers exposure to large-scale systems, innovative technologies, and a collaborative environment where skills and ideas make a real impact. Accountabilities: - End-to-end management of cybersecurity incidents, ensuring timely detection, triage, investigation, and resolution - Achieving and maintaining target MTTD (Mean Time to Detect) and MTTR (Mean Time to Respond) benchmarks. - Effective administration and optimization of the Elastic SIEM platform, including rule creation, tuning, and integrations. - Development of accurate and relevant detection use cases aligned with evolving threat patterns and organizational needs. - Ensuring timely escalation and coordination with internal and external stakeholders during major incidents. - Providing transparent and comprehensive incident reporting to leadership and relevant teams. - Drive operational excellence through monitoring, alerting, timely investigation and continuous fine tuning the alerts - Partner with Data Engineering, Architecture, Security, Infrastructure & Tooling teams to ensure aligned technical cyber security discussions Responsibilities: - Monitor, triage, and investigate alerts from multiple log sources (network, endpoint, cloud, and application). - Create, refine, and manage SIEM detection rules to capture the latest attack patterns. - Conduct log analysis and event correlation to identify potential intrusions or malicious behavior. - Drive use case ideation and validation to improve threat detection coverage and accuracy. - Manage and maintain Elastic Stack components (Elasticsearch, Logstash, Kibana, Beats) for operational efficiency. - Lead integration efforts with tools such as EDR, firewalls, cloud platforms, and ticketing systems. - Collaborate with IT, Network, and Cloud teams for incident follow-up, containment, and recovery. - Present incident findings, root cause analyses, and remediation plans to key stakeholders (internal leadership and external partners). - Document and enhance incident response playbooks and standard operating procedures (SOPs). - Conduct post-incident reviews and implement lessons learned to strengthen the organization's security posture. Requirements - 5-8 years of experience in Security Operations Center (SOC), Incident Response, or Detection Engineering roles. - Proven success in SIEM administration, particularly Elastic Stack (ELK) environments. - Hands-on expertise in incident triage, log analysis, and detection rule engineering. - Demonstrated ability to design and operationalize MITRE ATT&CK-aligned use cases. - Experience in cross-department collaboration and incident coordination with IT and business teams. - Strong presentation and communication experience in stakeholder-level incident discussions. - Relevant certifications such as CISSP,GCIH, GCIA, CEH, or Elastic Certified Engineer preferred.", "summaryDescription" : "Assistant Manager, Cybersecurity Incident Response at telecommunications organization. Skills: Incident Response, SIEM administration, Detection Engineering. Manage cybersecurity incidents. Achieve MTTD benchmarks", "createdAt" : "2026-06-13T22:02:53.611", "lastUpdated" : "2026-06-15T07:44:00.220", "ingestTimestamp" : "2026-06-13T22:02:53.611", "mongoId" : "6a2c68fa74d8ee00a09057f9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Log analysis", "Event correlation", "Rule creation", "Rule tuning", "Integration efforts", "Incident Response", "SIEM administration", "Detection Engineering", "Incident management", "Detection engineering", "Use case development", "Stakeholder coordination", "Incident reporting", "Operational excellence", "Threat detection", "Root cause analysis", "Lessons learned", "Cybersecurity incidents", "Threat patterns", "Attack patterns", "MITRE ATT&CK", "CISSP", "GCIH", "GCIA", "CEH", "Elastic Certified Engineer", "Elastic SIEM", "Elastic Stack", "EDR", "Ticketing systems" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 714.9033, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c5f4074d8ee00a08ea55f", "title" : "Security Incident Response Lead", "company" : "Nscale", "industry" : "AI Infrastructure", "salary" : { "min" : 150000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "AMER", "locations" : [ "AMER" ], "timestamp" : "2026-06-15T02:45:24.541", "fingerprint" : "97da22b2e3f980604e8d6395c438f3f52604ff35672fecd27a2405a86ad0765f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/nscaleoperationsukltd/jobs/4824321101", "externalId" : "4824321101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" }, { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States; Canada", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud infrastructure, SIEM, EDR/XDR, Automation", "professionalSkills" : [ "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering" ], "hardSkillsList" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Forensics techniques", "level" : "intermediate" }, { "name" : "Investigation techniques", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" }, { "name" : "Incident lifecycles", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Cloud security", "majorSkillsList" : [ "Incident response", "Digital forensics", "Cloud security" ], "coreResponsibilities" : "Lead end-to-end security incident response, Act as incident commander, Coordinate cross-functional response efforts, Conduct investigations, Oversee investigations, Apply digital forensics techniques, Drive containment efforts, Drive eradication efforts, Drive recovery efforts, Contribute to threat hunting, Contribute to proactive investigations, Develop incident response playbooks, Maintain incident response playbooks, Develop escalation frameworks, Establish escalation frameworks, Lead post-incident reviews, Lead root cause analysis, Drive long-term remediation actions, Partner to improve alerting, Partner to improve triage, Partner to improve response workflows, Build incident response tooling, Scale incident response tooling, Enhance case management systems", "teamCollaboration" : "Cross-functional response efforts; Partner with Detection & Response; Coordinate with Infrastructure; Coordinate with IT; Coordinate with Legal; Coordinate with Compliance", "domainKnowledge" : "AI infrastructure; High-performance computing; Large-scale distributed systems; Attack techniques; Threat actors; Incident lifecycles; Cloud environments; Production environments", "domainList" : [ "ai-infrastructure", "high-performance-computing", "large-scale-distributed-systems", "attack-techniques", "threat-actors", "incident-lifecycles", "cloud-environments", "production-environments" ], "domainSpecificKnowledge" : [ "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Incident lifecycles", "Cloud environments", "Production environments" ], "toolProficiency" : [ "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "communicationSkills" : "Brief leadership; Coordinate across teams", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "End-to-end IR effectiveness; High-severity incident coordination; Post-incident review completion; Remediation completion; IR tooling maturity; Automation maturity; Workflow maturity", "qualificationsBasic" : "8-12+ years incident response experience, 8-12+ years security operations experience, 8-12+ years digital forensics experience, Proven experience leading high-severity investigations, Hands-on experience with SIEM, Hands-on experience with EDR/XDR, Hands-on experience with detection tooling, Operate as technical leader, Make decisions under pressure, Brief leadership, Coordinate across teams", "qualificationsPreferred" : "Experience in AI infrastructure, Experience in high-performance computing, Experience in large-scale distributed systems, Familiarity with detection engineering, Familiarity with threat hunting, Familiarity with building automation for IR", "remoteFriendly" : true, "rawDescription" : "About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We’re hiring a Security Incident Response Lead to own and evolve Nscale’s incident response capability in a high-scale, AI-native environment. This is a hands-on leadership role focused on leading investigations across infrastructure, enterprise systems, and security events, while driving effective containment, eradication, and recovery. The role operates at the center of incident coordination and partners closely with Detection & Response as well as cross-functional stakeholders including Infrastructure, IT, Legal, and Compliance. You will help shape how Nscale detects and responds to threats by building the processes, tooling, and operational rigor behind the incident response function. This role is critical to strengthening the organization’s security posture and ensuring high-severity events are managed with speed, clarity, and technical depth. This role will be part of the global CISO organization. What you'll be doing Incident Leadership & Coordination Lead end-to-end security incident response across the organization Act as the incident commander for high-severity events Coordinate cross-functional response efforts with Infrastructure, IT, Legal, and Compliance Participate in and help design on-call and escalation rotations Investigations & Forensics Conduct and oversee investigations across endpoints, cloud, and infrastructure systems Apply digital forensics techniques across logs, endpoints, and cloud environments Drive containment, eradication, and recovery efforts for active security incidents Contribute to threat hunting and proactive investigations Process, Playbooks & Operational Rigor Develop and maintain incident response playbooks and runbooks Establish escalation frameworks to support effective incident handling Lead post-incident reviews and root cause analysis efforts Drive long-term remediation actions following incidents Tooling & Response Improvement Partner with Detection & Response teams to improve alerting, triage, and response workflows Build and scale incident response tooling and automation Enhance case management systems that support investigation and response operations KPIs End-to-end security incident response effectiveness High-severity incident coordination and command Post-incident review and remediation completion Incident response tooling, automation, and workflow maturity About You 8–12+ years of experience in incident response, security operations, or digital forensics Proven experience leading complex, high-severity incident investigations in cloud or distributed environments Strong expertise in forensics and investigation techniques across endpoints, cloud, and logs Hands-on experience with SIEM, EDR/XDR, and detection tooling Familiarity with cloud infrastructure and modern production environments Deep understanding of attack techniques, threat actors, and incident lifecycles Ability to operate as a technical leader during incidents and make decisions under pressure Strong communication skills with the ability to brief leadership and coordinate across teams Experience in AI infrastructure, high-performance computing, or large-scale distributed systems is a plus Familiarity with detection engineering, threat hunting, or building automation for incident response workflows is beneficial What we can offer you At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \uD83D\uDE80 Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨ Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support. Human-First Flexibility: We treat you as humans first. \uD83E\uDEF6\uD83C\uDFFD Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments. Equal Opportunities Statement We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know. The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Salary Range The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. Salary Range $150,000—$225,000 USD For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.", "summaryDescription" : "Security Incident Response Lead at Nscale. Skills: Incident response, Digital forensics, Cloud security. Lead end-to-end security incident response. Act as incident commander", "postedDate" : "2026-06-12T22:26:36.876", "createdAt" : "2026-06-12T22:26:36.876", "lastUpdated" : "2026-06-15T02:45:24.541", "ingestTimestamp" : "2026-06-12T22:26:36.876", "mongoId" : "6a2c5f4074d8ee00a08ea55f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles", "Leadership", "Cloud security", "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering", "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Cloud environments", "Production environments", "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "skillCount" : 26, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "_score" : 714.28296, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "AI Infrastructure" }, { "id" : "6a305851f292fd229cf414cd", "title" : "Senior DeltaV Automation Engineer", "company" : "Matrix Technologies", "industry" : "Consulting", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior DeltaV Automation Engineer in Westminster, United States, adjusted for industry and company size." }, "location" : "Westminster, CO", "locations" : [ "Westminster", "CO" ], "timestamp" : "2026-06-16T08:02:21.591", "fingerprint" : "ff8d7ee45b729eaff1c1a951a4ffcc3c4972ed541f533244db48c3c2d96eaaa0", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://matrix-technologies-inc.breezy.hr/p/dcc9957b8bdb-senior-deltav-automation-engineering", "externalId" : "dcc9957b8bdb", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Westminster", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8366528,-105.0372046" } ], "locationText" : "Westminster, Colorado, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "Senior DeltaV Automation Engineer ABOUT US Matrix Technologies, Inc. has been a leading provider of engineering, automation, and systems integration services since 1980. Guided by", "summaryDescription" : "Senior DeltaV Automation Engineer at Matrix Technologies", "createdAt" : "2026-06-15T22:11:01.803", "lastUpdated" : "2026-06-16T08:02:21.591", "ingestTimestamp" : "2026-06-15T22:11:01.803", "mongoId" : "6a305851f292fd229cf414cd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 709.5477, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145374d8ee00a00bb369", "title" : "Incident Management Engineer (Spanish/English bilingual), Incident Detection and Response", "company" : "Amazon Web Services Australia Pty Ltd", "industry" : "Operations, IT, Support Engineering, Cloud Computing", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Management Engineer in Sydney, Australia, adjusted for the technology industry and a large company size." }, "location" : "Sydney, New South Wales, AUS", "locations" : [ "Sydney, New South Wales, AUS" ], "certifications" : [ "AWS Associate level certifications" ], "timestamp" : "2026-06-15T00:55:38.724", "fingerprint" : "215f83d4baf92237a7526340281af7ea6f4f60e3b3b81fb5e8d07800f2bec392", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441540/apply", "externalId" : "6848a1ed-03fd-448c-825f-45e26cd76529", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Sydney", "state" : "New South Wales", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8698439,151.2082848" } ], "locationText" : "Sydney, New South Wales, Australia", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS", "professionalSkills" : [ "Incident Management", "Customer ownership", "Account ownership", "Problem solving", "Strategic planning" ], "hardSkillsList" : [ "Incident response", "Technical troubleshooting", "Runbook development", "Response plan development" ], "softSkillsList" : [ "Leadership", "Mentoring", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Technical troubleshooting", "level" : "intermediate" }, { "name" : "Runbook development", "level" : "intermediate" }, { "name" : "Response plan development", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident Management, Incident Response, Customer Support", "majorSkillsList" : [ "Incident Management", "Incident Response", "Customer Support" ], "coreResponsibilities" : "Drive resolution of large scale customer impacting incidents, Drive critical, complex customer escalations, Provide critical incident response/management, Lead calls with internal/external participants, Contribute to Problem Records, Conduct continuous real-time proactive monitoring, Prioritize, manage, and own customer issues, Monitor and manage communications during high impact events, Collaborate with key stakeholders across AWS, Improve customer experience, Develop mechanisms that support operational excellence, Lead projects and teams, Drive operational improvements, Create and review design, Influence new standard operating procedures, Identify and troubleshoot recurring platform issues, Own projects to drive improvements, Mentor peers, Perform other duties as required", "teamCollaboration" : "Cross-functional teams; Engineering Teams; Internal/external participants", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Cloud technologies; Distributed architectures; Mission critical applications", "domainList" : [ "cloud-technologies", "distributed-architectures", "mission-critical-applications" ], "domainSpecificKnowledge" : [ "Cloud technologies", "Distributed architectures", "Mission critical applications" ], "communicationSkills" : "Written communication; Verbal communication; Presenting to audience; Convey key details", "documentationSkills" : "Technical documentation", "problemSolvingSkills" : "Analytical acumen; Logical problem solving; Critical thinking; Troubleshoot recurring platform issues", "specialRequirements" : "Work weekends, Work public holidays", "qualificationsBasic" : "Business level Spanish and English, 3+ years Major Incident / Problem Manager Experience, 5+ years Support Engineering, Network Engineering, Solutions Architecture, or similar IT role, Bachelor’s degree in Computer Science, Information Science/Technology, Communications Engineering, Business, or related field (or 6+ years relevant work experience), Professional oral and written communication skills", "qualificationsPreferred" : "Industry specific accredited certification(s), AWS Associate level certifications, Knowledge of ITIL/Lean Processes, Ability to work in ambiguous environments, Demonstrated critical thinking and logical problem solving skills, Experience driving collaborative projects, Familiarity operating or designing distributed architectures, Ability to review complex technical details", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon has built a reputation for excellence with a mission to be the earth’s most customer-centric company, a company that customers from all over the globe will recognize, value, and trust for both our products and our service. Amazon Web Services (AWS) is carrying on that tradition while leading the world in cloud technologies. The AWS Incident Detection and Response team is part of the ASPIRE organisation within AWS Support, and is dedicated to offering eligible AWS Enterprise Support customers proactive engagement and incident management to reduce the potential for failure and to accelerate recovery of critical workloads from disruption. We achieve these objectives by working closely with customers to develop runbooks and response plans customized to the context of each workload onboarded to the service. Onboarded workloads are monitored 24x7 by a team of Incident Management Engineers (IMEs) to detect and engage customers on a call bridge within 5 minutes of a critical alarm. ABOUT YOU Incident Management Engineers have a broad skill set with demonstrated career progression and a proven track record of delivering results. The successful candidate will possess strong analytical acumen, solid technology experience, superb business judgment, strategic account ownership and a propensity to dive deep to solve complex problems. You will also have a passion for creating/providing a world class experience for our customers. The candidate must understand the competitive and industry landscape and must have the leadership presence and communication skills to effectively work with customers at all levels of their organization. You must be a self-starter and able to execute at both a tactical and strategic level – with a strong attention to detail. This is a global role that requires excellent written and verbal communication skills and a passion and desire for leading the resolution of critical incidents. Your decisions are not only fundamental to helping protect our most critical customers but will help maintain the health of AWS customers worldwide. Finally, you are passionate about technology with a desire to learn more and do more with AWS. ABOUT THE ROLE AWS Support is looking for a leader with a strong background in Incident Management and customer ownership to be there during the moments that matter for our most critical customers. We are looking for an Incident Management Engineer to join our team to provide incident response and account ownership. In this position, you will play a pivotal role in providing communication, emergency response, technical resolver engagement and incident management for our customers. Please note as a follow-the-sun organisation, IMEs work the core hours of 9am-5pm AEST. Successful applicants will be required to work some weekends (Sunday to Thursday, or Tuesday to Saturday), and public holidays. Key job responsibilities - Every day will bring new and exciting challenges that include elements of: - Drive the resolution of large scale customer impacting incidents as part of a team rotation - Drive critical, complex customer escalations in situations that are sometimes technically challenging in collaboration with Engineering Teams. - Provide critical incident response/management (including leading calls with internal/external participants) for customer’s critical workloads - Contribute to Problem Records for customers - Conduct continuous real-time proactive monitoring of customer metrics - Prioritize, manage, and own emerging and developing customer issues from start to finish - Monitor and manage communications during high impact events via relevant channels - Collaborate with key stakeholders across AWS to improve the customer experience and develop mechanisms that support operational excellence - Lead projects and teams to drive operational improvements - Create and review documentation; design/influence new standard operating procedures - Identify and troubleshoot recurring platform issues and own projects to drive improvements - Mentor peers in your areas of technical and operational strength - Perform other duties as required by the organization About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Basic Qualifications: - Business level Spanish and English, verbal and written - 3+ years demonstrable Major Incident / Problem Manager Experience for organizations that run mission critical applications - 5+ years of experience in Support Engineering, Network Engineering, Solutions Architecture, or similar IT role. - Bachelor’s degree in Computer Science, Information Science/Technology, Communications Engineering, Business, or a related field (or 6+ years of relevant work experience) - Professional oral and written communication skills, presenting to an audience containing one or more executive team member(s) Preferred Qualifications: - Industry specific accredited certification(s) such as the AWS Associate level certifications - Knowledge of ITIL/Lean Processes - Ability to work in ambiguous environments - Demonstrated critical thinking and logical problem solving skills - Experience driving collaborative projects from conception to delivery - Familiarity operating or designing distributed architectures with the ability to correlate system behaviors based on known inter-dependencies - Ability to review complex technical details regarding ongoing issues/events and convey the key details to senior stakeholders to facilitate real-time decision making Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Incident Management Engineer (Spanish/English bilingual), Incident Detection and Response at Amazon Web Services Australia Pty Ltd. Skills: Incident Management, Incident Response, Customer Support. Drive resolution of large scale customer impacting incidents. Drive critical, complex customer escalations", "postedDate" : "2026-06-13T10:47:22.538", "createdAt" : "2026-06-13T10:47:22.538", "lastUpdated" : "2026-06-15T00:55:38.724", "ingestTimestamp" : "2026-06-13T10:47:22.538", "mongoId" : "6a25145374d8ee00a00bb369", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441540/apply", "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Incident response", "Technical troubleshooting", "Runbook development", "Response plan development", "Leadership", "Mentoring", "Critical thinking", "Incident Management", "Incident Response", "Customer Support", "Customer ownership", "Account ownership", "Problem solving", "Strategic planning", "Project management", "Cloud technologies", "Distributed architectures", "Mission critical applications", "AWS Associate level certifications" ], "skillCount" : 19, "jobCategory" : "operations", "dataQualityScore" : 0.8888889, "_score" : 708.74884, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Technologies" }, { "id" : "6a2c6ac174d8ee00a090db94", "title" : "Senior Automation Engineer", "company" : "Atlas Air", "salary" : { "min" : 115000.0, "max" : 153000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "White Plains, NY, USA", "locations" : [ "White Plains", "NY", "USA" ], "timestamp" : "2026-06-16T00:42:59.666", "fingerprint" : "2315973b64ae4273c070148c95c05acbbf27a3a354df3344b6abe75face381bb", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.atlasairworldwide.com/careers/job-board/?gh_jid=4264689009", "externalId" : "4264689009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "White Plains", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0339862,-73.7629097" }, { "city" : "Erlanger", "state" : "Kentucky", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.0167275,-84.6007773" }, { "city" : "Miami", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "25.7741566,-80.1935973" } ], "locationText" : "White Plains, New York, United States; Erlanger, Kentucky, United States; Miami, Florida, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Join Atlas Air Worldwide. Move the World with Us! At Atlas Air Worldwide, we’re not just an airline, we’re a global engine powering cargo, passenger, and leasing operations across more than 70 countries. As a leader in outsourced aviation logistics, we’re built on a foundation of safety, service excellence, integrity, innovation, teamwork, and responsibility. With over 30 years of history, a modern all-Boeing fleet, and nearly 5,000 teammates collaborating across operations, technical, and corporate functions, we’re driven by purpose. If you're ready to grow, innovate, and help us deliver excellence every single day, you belong here. *This role is flexible to be based in White Plains, NY; Erlanger, KY; or Miami, FL office. Atlas Air is on a mission to transform how our operations run — and automation is at the center of that work. As a Senior Automation Engineer, you'll design and deliver solutions that eliminate manual bottlenecks, connect enterprise systems, and make our most critical workflows faster and more reliable. This isn't a maintenance role. You'll be solving hard, ambiguous problems where both the business requirements and the technical path forward need to be defined from scratch. You'll work closely with operational and technical stakeholders across the business, translating complex process challenges into elegant, scalable automation — and helping set the strategic direction for how we build and scale automation capability at the enterprise level. Values and Behavioral Standards: To ensure the effective communication and application of company values and behavioral standards, as stated in our company “Code of Conduct” policy, and to respond appropriately in the event of any known departure, and to manage the people and processes for which the position is responsible in an effective, open and mature fashion. Major Accountabilities: Design and implement end-to-end automation solutions across enterprise systems, including ERP and WMS Build robust integrations using APIs, webhooks, event-driven patterns, and messaging queues Write clean, maintainable automation scripts in Python, PowerShell, or JavaScript Work across cloud and serverless environments (AWS or Azure) and enterprise data platforms such as Databricks, Redshift, or BigQuery Develop and manage complex job scheduling, orchestration, and dependency chains Incorporate AI-based automation where it meaningfully improves outcomes Own reliability — design for error handling, monitoring, and operational visibility from the start Contribute to and help shape Atlas's enterprise automation roadmap Mentor junior engineers and raise the technical bar across the team Clearly articulate solution tradeoffs to both technical and non-technical audiences Qualifications: 7+ years of experience as an Automation Engineer or in a closely related role Bachelor's degree in Computer Science, Engineering, or a related field Proven track record delivering automation solutions in complex, enterprise-scale environments Deep proficiency with workflow and orchestration tools, scripting languages, and system integration patterns Comfort working with structured and semi-structured data (JSON, XML, SQL) A process optimization mindset — you find inefficiency frustrating and fixing it energizing Experience influencing technical roadmaps beyond your immediate team Ability to move fast in an iterative environment without sacrificing quality The Company is an Equal Opportunity Employer. It is our policy to afford equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, national origin, citizenship, place of birth, age, disability, protected veteran status, gender identity or any other characteristic or status protected by applicable in accordance with federal, state and local laws. If you'd like more information about your EEO rights as an applicant under the law, please download the available EEO is the Law document by clicking \"EEO Is The Law\" . To view our Pay Transparency Statement, please click here: Pay Transparency Statement Competitive compensation will be offered based on a variety of factors, including a candidate's experience, skills, education, geographic location, internal equity and other factors. In addition, a range of benefits to include medical, dental and vision insurance, employee assistance program, as well as generous paid time off, and 401K contributions are offered as a part of the total compensation package. Pay Range $115,000—$153,000 USD At Atlas Air Worldwide, we believe in the power of people, the promise of innovation, and the responsibility we hold to each other, to our customers, and to the planet. Join us and be part of a team that lifts more than cargo; we lift ambition.", "summaryDescription" : "Senior Automation Engineer at Atlas Air", "postedDate" : "2026-06-14T21:46:02.063", "createdAt" : "2026-06-14T21:46:02.063", "lastUpdated" : "2026-06-16T00:42:59.666", "ingestTimestamp" : "2026-06-14T21:46:02.063", "mongoId" : "6a2c6ac174d8ee00a090db94", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 153000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 708.7075, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "68b706987fc9a711f0f6fbe1", "title" : "Senior Automation Engineer", "company" : "Amazon.com LLC", "industry" : "Facilities, Maintenance, Real Estate, Ops Engineering, operations", "salary" : { "min" : 102600.0, "max" : 163000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Englewood, Colorado, USA", "locations" : [ "Englewood, Colorado, USA" ], "timestamp" : "2026-06-16T03:08:50.249", "fingerprint" : "20450876008f85a2a6a30d339bdf4e8d9bba5f684466ba783e58bd34e07ad06e", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3051973/apply", "externalId" : "f1510274-d391-4b6e-8be0-00f9700e8431", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Englewood", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.6482059,-104.9879641" } ], "locationText" : "Englewood, Colorado, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "Operations is at the heart of Amazon’s business. We are known for our speed, accuracy, and exceptional service. Our buildings deliver tens of thousands of products to hundreds of countries worldwide, every day. The Reliability & Maintenance Engineering (RME) team are the business partners that work tirelessly behind the scenes to make it happen. We drive continuous improvement, and maintain all of the robotics and material handling equipment (MHE) to ensure our customers are met with the Amazon smile. Come join us on our journey! About the Role: As a Senior Automation Engineer, you will play a crucial role in maximizing equipment reliability and operational performance in our fulfillment centers by providing proactive controls automation and technical support. Your expertise will be essential in troubleshooting complex control systems, analyzing performance metrics, and driving continuous improvement initiatives. You'll mentor junior engineers and lead cross-functional teams to optimize material handling equipment (MHE) systems, implement innovative projects, and develop system design improvements to enhance site throughput. You'll work with state-of-the-art technology, including conveyors, sortation systems, scanners, cameras, print and apply systems, and SCADA devices and programs. Through your technical leadership and design optimization efforts, you'll directly contribute to ensuring our customers receive their orders with Amazon's signature speed and accuracy while building team capabilities and driving operational excellence. What Do We Offer? Amazon offers competitive compensation packages including comprehensive healthcare benefits starting on Day 1, matching 401(k) program, and up to 20 weeks of paid parental leave. But wait, there’s more: We provide lightweight fire-resistant daily wear and composite toe safety shoes for your safety! Key job responsibilities Responsibilities include, but are not limited to: - Serve as the site expert for maintaining automation systems critical to operations - Collaborate with building Operations, Operations Engineering teams, FC Start-up Team, AFT Software teams, ACES team, and Safety to support MHE systems optimization and project implementation - Understand, maintain and troubleshoot material handling control systems, including PLC/PC controllers and industrial networks such as Ethernet, ControlNet, DeviceNet, Profibus, motor control systems, servo drives, frequency drives, and electrical distribution systems - Monitor MHE metrics and partner with maintenance/operations to address system performance issues and provide analysis across all operations - Provide second-level escalation support to site technicians and automation engineers, both locally and remotely - Appropriately escalate downtime situations to vendors or headquarters for support to restore equipment operation. - Facilitate Failure Analysis and Incident Review processes to drive continuous improvement - Perform and analyze building System Assessments to enhance material handling system performance - Communicate technical issues and project timelines clearly to building managers, operations staff and maintenance teams At Amazon, we continuously strive to make sure our opportunities are open to all. We treat all job applications equally, and are always delighted to welcome a new Amazonian. Apply to join our close-knit team and your Amazon RME adventure will begin from day one. Where it goes and what it looks like is up to you! Basic Qualifications: - Bachelor's degree in computer science, electrical engineering, automation engineering, or equivalent, or 4+ years of PLC programming or automation engineering experience - Work a flexible schedule/shift/work area, including weekends, nights, and/or holidays - 2+ years of process or production environment related PLC-controlled automation and issue diagnosis experience - 2+ years of robotics work cells and control systems experience - 2+ years of Siemens, Allen-Bradley or Codesys Ladder Logic and structure programming experience - 2+ years of electrical theory, robotics, controls components, and automated equipment experience - Experience with a Computerized Maintenance Management System (CMMS) Preferred Qualifications: - Advanced degree in computer science, electrical engineering, automation engineering - Experience acting in a team lead capacity, supporting, training, and mentoring less experienced automation engineering professionals - Experience with HMI and control network components, including maintenance, troubleshooting, programming and design - Experience identifying, maintaining, troubleshooting, and modifying Motor Controls including motor starters, Variable Frequency Drives, DC drives, and standard electrical components - Hands-on industrial electrical experience, including 480V 3-phase, 110 VAC, and 24VDC systems - Experience interpreting, modifying, and developing mechanical and electrical drawings - Experience identifying, maintaining, and utilizing SCADA systems and KPIs - Experience with programming software such as RSLogix5000, Studio 5000, FT View, and other controls software platforms - Experience in controls design or programming - Systems integration experience - Field service engineering or systems training experience - Experience supporting various conveyors and sortation systems - Excellent written, verbal and customer service skills - Proven track record in remote technical support - Experience driving continuous improvement or programmatic solutions in relation to automated equipment - Experience with advanced automation controls systems and industrial robotics - Experience with Automated Storage and Retrieval Systems (ASRS) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $102,600/year in our lowest geographic market up to $163,000/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Automation Engineer at Amazon.com LLC", "postedDate" : "2026-06-14T19:54:38.440", "createdAt" : "2026-06-14T19:54:38.440", "lastUpdated" : "2026-06-16T03:08:50.249", "ingestTimestamp" : "2026-06-14T19:54:38.440", "mongoId" : "68b706987fc9a711f0f6fbe1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3051973/apply", "salaryAnnualMin" : 102600, "salaryAnnualMax" : 163000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 702.0647, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "68e0a7e4ce260f92cbf8eb61", "title" : "Senior Automation Engineer", "company" : "Amazon.com Services LLC", "industry" : "Facilities, Maintenance, Real Estate, Ops Engineering, operations", "salary" : { "min" : 102600.0, "max" : 163000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Daytona Beach, Florida, USA", "locations" : [ "Daytona Beach, Florida, USA" ], "timestamp" : "2026-06-16T02:22:22.310", "fingerprint" : "07ead6175801bc156d2a8201046221a1296e8be38c8207dc9617e3328046b20a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3099849/apply", "externalId" : "26df8c48-4a2b-46b6-b2bf-872cdf63bfa1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Daytona Beach", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "29.2108147,-81.0228331" } ], "locationText" : "Daytona Beach, Florida, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "Operations is at the heart of Amazon’s business. We are known for our speed, accuracy, and exceptional service. Our buildings deliver tens of thousands of products to hundreds of countries worldwide, every day. The Reliability & Maintenance Engineering (RME) team are the business partners that work tirelessly behind the scenes to make it happen. We drive continuous improvement, and maintain all of the robotics and material handling equipment (MHE) to ensure our customers are met with the Amazon smile. Come join us on our journey! About the Role: As a Senior Automation Engineer, you will play a crucial role in maximizing equipment reliability and operational performance in our fulfillment centers by providing proactive controls automation and technical support. Your expertise will be essential in troubleshooting complex control systems, analyzing performance metrics, and driving continuous improvement initiatives. You'll mentor junior engineers and lead cross-functional teams to optimize material handling equipment (MHE) systems, implement innovative projects, and develop system design improvements to enhance site throughput. You'll work with state-of-the-art technology, including conveyors, sortation systems, scanners, cameras, print and apply systems, and SCADA devices and programs. Through your technical leadership and design optimization efforts, you'll directly contribute to ensuring our customers receive their orders with Amazon's signature speed and accuracy while building team capabilities and driving operational excellence. What Do We Offer? Amazon offers competitive compensation packages including comprehensive healthcare benefits starting on Day 1, matching 401(k) program, and up to 20 weeks of paid parental leave. But wait, there’s more: We provide lightweight fire-resistant daily wear and composite toe safety shoes for your safety! Key job responsibilities Key job responsibilities include, but are not limited to: - Apply Subject Matter Expertise (SME) on troubleshooting and dive deeps for engineering issues, supporting automation engineers to investigate the root cause and planning actions to eliminate/mitigate the downtime of critical assets - Collaborate with building Operations, Operations Engineering teams, FC Start-up Team, AFT Software teams, ACES team, and Safety to support MHE systems optimization and project implementation - Understand, maintain and troubleshoot material handling control systems, including PLC/PC controllers and industrial networks such as Ethernet, ControlNet, DeviceNet, Profibus, motor control systems, servo drives, frequency drives, and electrical distribution systems - Monitor MHE metrics and partner with maintenance/operations to address system performance issues and provide analysis across all operations - Provide escalation support to automation engineers, during and after business hours, troubleshooting locally and remotely, to ensure that all hardware or controls software within the building is repaired on time - Appropriately escalate downtime situations to vendors or leadership for support to restore equipment operation. - Facilitate Failure Analysis and Incident Review processes to drive continuous improvement - Perform and analyze building System Assessments to enhance material handling system performance - Communicate technical issues and project timelines clearly to senior leadership, operations staff and maintenance teams - Move up to 49lbs as well as stand and walk during shifts lasting up to 12 hours, with or without reasonable accommodation - Climb ladders and gangways safely and without limitation - Regular bending, lifting, stretching, and reaching both below the waist and above the head - Engage in full manual dexterity in both hands and wrists Basic Qualifications: - Bachelor's degree in computer science, electrical engineering, automation engineering, or equivalent, or 4+ years of PLC programming or automation engineering experience - Work a flexible schedule/shift/work area, including weekends, nights, and/or holidays - 2+ years of process or production environment related PLC-controlled automation and issue diagnosis experience - 2+ years of robotics work cells and control systems experience - 2+ years of Siemens, Allen-Bradley or Codesys Ladder Logic and structure programming experience - 2+ years of electrical theory, robotics, controls components, and automated equipment experience - Experience with a Computerized Maintenance Management System (CMMS) Preferred Qualifications: - Experience acting in a team lead capacity, supporting, training, and mentoring less experienced automation engineering professionals - Experience identifying, maintaining, troubleshooting, and modifying Motor Controls including motor starters, Variable Frequency Drives, DC drives, and standard electrical components - Hands-on industrial electrical experience, including 480V 3-phase, 110 VAC, and 24VDC systems - Experience interpreting, modifying, and developing mechanical and electrical drawings - Experience identifying, maintaining, and utilizing SCADA systems and KPIs - Experience with programming software such as RSLogix5000, Studio 5000, FT View, and other controls software platforms Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $102,600/year in our lowest geographic market up to $163,000/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Automation Engineer at Amazon.com Services LLC", "postedDate" : "2026-06-14T19:58:04.248", "createdAt" : "2026-06-14T19:58:04.248", "lastUpdated" : "2026-06-16T02:22:22.310", "ingestTimestamp" : "2026-06-14T19:58:04.248", "mongoId" : "68e0a7e4ce260f92cbf8eb61", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3099849/apply", "salaryAnnualMin" : 102600, "salaryAnnualMax" : 163000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 700.9555, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.98 }, { "id" : "69c94a709bc74574cbbb38e5", "title" : "Senior Automation Engineer", "company" : "Amazon.com Services LLC", "industry" : "Facilities, Maintenance, Real Estate, Ops Engineering, operations", "salary" : { "min" : 114000.0, "max" : 148200.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Thornton, Colorado, USA", "locations" : [ "Thornton, Colorado, USA" ], "timestamp" : "2026-06-16T01:10:02.693", "fingerprint" : "8eb1ea3849c14cda7caaa3ef29c56460f33f79c81e7fb182ffb78975df034bea", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3194455/apply", "externalId" : "068e9542-2ac3-476f-870a-568ef8efb667", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Thornton", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8695516,-104.9851810" } ], "locationText" : "Thornton, Colorado, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "Application deadline: Mar 29, 2026 Operations is at the heart of Amazon’s business. We are known for our speed, accuracy, and exceptional service. Our buildings deliver tens of thousands of products to hundreds of countries worldwide, every day. The Reliability & Maintenance Engineering (RME) team are the business partners that work tirelessly behind the scenes to make it happen. We drive continuous improvement, and maintain all the robotics and material handling equipment (MHE) to ensure our customers are met with the Amazon smile. Come join us on our journey! About the Role: As a Senior Automation Engineer, you will play a crucial role in maximizing equipment reliability and operational performance in our fulfillment centers by providing proactive controls automation and technical support. Your expertise will be essential in troubleshooting complex control systems, analyzing performance metrics, and driving continuous improvement initiatives. You'll mentor junior engineers and lead cross-functional teams to optimize material handling equipment (MHE) systems, implement innovative projects, and develop system design improvements to enhance site throughput. You'll work with state-of-the-art technology, including conveyors, sortation systems, scanners, cameras, print and apply systems, and SCADA devices and programs. Through your technical leadership and design optimization efforts, you'll directly contribute to ensuring our customers receive their orders with Amazon's signature speed and accuracy while building team capabilities and driving operational excellence. What Do We Offer? Amazon offers competitive compensation packages including comprehensive healthcare benefits starting on Day 1, matching 401(k) program, and up to 20 weeks of paid parental leave. But wait, there’s more: We provide lightweight fire-resistant daily wear and composite toe safety shoes for your safety! Key job responsibilities Key job responsibilities include, but are not limited to: You will apply Subject Matter Expertise (SME) on troubleshooting and dive deeps for engineering issues, supporting automation engineers to investigate the root cause and planning actions to eliminate/mitigate the downtime of critical assets You will collaborate with building Operations, Operations Engineering teams, FC Start-up Team, AFT Software teams, ACES team, and Safety to support MHE systems optimization and project implementation You will understand, maintain and troubleshoot material handling control systems, including PLC/PC controllers and industrial networks such as Ethernet, ControlNet, DeviceNet, Profibus, motor control systems, servo drives, frequency drives, and electrical distribution systems You will monitor MHE metrics and partner with maintenance/operations to address system performance issues and provide analysis across all operations You will provide escalation support to automation engineers, during and after business hours, troubleshooting locally and remotely, to ensure that all hardware or controls software within the building is repaired on time You must be able to move up to 49lbs, stand and walk during shifts lasting up to 12 hours, climb ladders and gangways safely and without limitation, as well as perform regular bending, lifting, stretching, and reaching both below the waist and above the head Basic Qualifications: - Bachelor's degree in computer science, electrical engineering, automation engineering, or equivalent, or 4+ years of PLC programming or automation engineering experience - Work a flexible schedule/shift/work area, including weekends, nights, and/or holidays - 4+ years of process or production environment related PLC-controlled automation and issue diagnosis experience - 4+ years of robotics work cells and control systems experience - 4+ years of Siemens, Allen-Bradley or Codesys Ladder Logic and structure programming experience - 4+ years of electrical theory, robotics, controls components, and automated equipment experience Preferred Qualifications: - Master's degree in computer science, electrical engineering, automation engineering, or equivalent - Master's degree, or Six Sigma Black Belt certification - Experience leading controls in manufacturing or complex industrial environments - Experience identifying, maintaining, and troubleshooting Motor Controls including motor starters, Variable Frequency Drives, DC drives, and standard electrical components - Experience interpreting and modifying mechanical and electrical drawings Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, CO, Denver - 114,000.00 - 148,200.00 USD annually USA, CO, Loveland - 114,000.00 - 148,200.00 USD annually USA, CO, Thornton - 114,000.00 - 148,200.00 USD annually", "summaryDescription" : "Senior Automation Engineer at Amazon.com Services LLC", "postedDate" : "2026-06-14T19:19:05.620", "createdAt" : "2026-06-14T19:19:05.620", "lastUpdated" : "2026-06-16T01:10:02.693", "ingestTimestamp" : "2026-06-14T19:19:05.620", "mongoId" : "69c94a709bc74574cbbb38e5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3194455/apply", "salaryAnnualMin" : 114000, "salaryAnnualMax" : 148200, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 698.63275, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.98 }, { "id" : "6a15eecf58b93c861e805729", "title" : "Senior Automation Engineer", "company" : "Amazon.com Services LLC", "industry" : "Facilities, Maintenance, Real Estate, Ops Engineering, operations", "salary" : { "min" : 114000.0, "max" : 148200.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Pflugerville, Texas, USA", "locations" : [ "Pflugerville, Texas, USA" ], "timestamp" : "2026-06-16T01:03:04.192", "fingerprint" : "a3557e2319366b040a6eb696ec340435de95437f3f8f4f9fe274e5571d6ca43a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10408775/apply", "externalId" : "84a64d9f-7f76-46b8-b7d4-ff42800cf028", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Pflugerville", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.4393696,-97.6200043" } ], "locationText" : "Pflugerville, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "coreResponsibilities" : "Manage and execute operational processes, Coordinate cross-functional teams, Manage vendor relationships, Manage stakeholder expectations, Track and report on operational metrics, Plan and allocate resources, Identify and implement process improvements", "teamCollaboration" : "Cross-functional teams; Stakeholder management", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Operations is at the heart of Amazon’s business. We are known for our speed, accuracy, and exceptional service. Our buildings deliver tens of thousands of products to hundreds of countries worldwide, every day. The Reliability & Maintenance Engineering (RME) team are the business partners that work tirelessly behind the scenes to make it happen. We drive continuous improvement, and maintain all the robotics and material handling equipment (MHE) to ensure our customers are met with the Amazon smile. Come join us on our journey! About the Role: As a Senior Automation Engineer, you will play a crucial role in maximizing equipment reliability and operational performance in our fulfillment centers by providing proactive controls automation and technical support. Your expertise will be essential in troubleshooting complex control systems, analyzing performance metrics, and driving continuous improvement initiatives. You'll mentor junior engineers and lead cross-functional teams to optimize material handling equipment (MHE) systems, implement innovative projects, and develop system design improvements to enhance site throughput. You'll work with state-of-the-art technology, including conveyors, sortation systems, scanners, cameras, print and apply systems, and SCADA devices and programs. Through your technical leadership and design optimization efforts, you'll directly contribute to ensuring our customers receive their orders with Amazon's signature speed and accuracy while building team capabilities and driving operational excellence. What Do We Offer? Amazon offers competitive compensation packages including comprehensive healthcare benefits starting on Day 1, matching 401(k) program, and up to 20 weeks of paid parental leave. But wait, there’s more: We provide lightweight fire-resistant daily wear and composite toe safety shoes for your safety! Key job responsibilities Key job responsibilities include, but are not limited to: - You will apply Subject Matter Expertise (SME) on troubleshooting and dive deeps for engineering issues, supporting automation engineers to investigate the root cause and planning actions to eliminate/mitigate the downtime of critical assets - You will collaborate with building Operations, Operations Engineering teams, FC Start-up Team, AFT Software teams, ACES team, and Safety to support MHE systems optimization and project implementation - You will understand, maintain and troubleshoot material handling control systems, including PLC/PC controllers and industrial networks such as Ethernet, ControlNet, DeviceNet, Profibus, motor control systems, servo drives, frequency drives, and electrical distribution systems - You will monitor MHE metrics and partner with maintenance/operations to address system performance issues and provide analysis across all operations - You will provide escalation support to automation engineers, during and after business hours, troubleshooting locally and remotely, to ensure that all hardware or controls software within the building is repaired on time - You must be able to move up to 49lbs, stand and walk during shifts lasting up to 12 hours, climb ladders and gangways safely and without limitation, as well as perform regular bending, lifting, stretching, and reaching both below the waist and above the head Basic Qualifications: - Bachelor's degree in computer science, electrical engineering, automation engineering, or equivalent, or 4+ years of PLC programming or automation engineering experience - Work a flexible schedule/shift/work area, including weekends, nights, and/or holidays - 4+ years of process or production environment related PLC-controlled automation and issue diagnosis experience - 4+ years of robotics work cells and control systems experience - 4+ years of Siemens, Allen-Bradley or Codesys Ladder Logic and structure programming experience - 4+ years of electrical theory, robotics, controls components, and automated equipment experience Preferred Qualifications: - Master's degree in computer science, electrical engineering, automation engineering, or equivalent - Master's degree, or Six Sigma Black Belt certification - Experience leading controls in manufacturing or complex industrial environments - Experience identifying, maintaining, troubleshooting, and modifying Motor Controls including motor starters, Variable Frequency Drives, DC drives, and standard electrical components - Experience interpreting and modifying mechanical and electrical drawings Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TX, Pflugerville - 114,000.00 - 148,200.00 USD annually", "summaryDescription" : "Senior Automation Engineer at Amazon.com Services LLC. Manage and execute operational processes. Coordinate cross-functional teams", "postedDate" : "2026-06-14T19:39:46.539", "createdAt" : "2026-06-14T19:39:46.539", "lastUpdated" : "2026-06-16T01:03:04.192", "ingestTimestamp" : "2026-06-14T19:39:46.539", "mongoId" : "6a15eecf58b93c861e805729", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10408775/apply", "salaryAnnualMin" : 114000, "salaryAnnualMax" : 148200, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 690.1547, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cad9674d8ee00a09d2f3c", "title" : "[8NW] Staff Software Engineer", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 4.8E7, "max" : 7.2E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Staff Software Engineer in San José, Costa Rica, adjusted for the FinTech industry and company size." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "timestamp" : "2026-06-15T08:29:25.526", "fingerprint" : "1b7147e92d35d40ed294e5e7487d4b7f24ad16658e8239490ad9529736a75919", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000131891839--8nw-staff-software-engineer", "externalId" : "744000131891839", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "React, TypeScript, Next.js, Node.js, GraphQL, SQL, REST API, Context API", "professionalSkills" : [ "System design", "Roadmap planning", "User stories" ], "hardSkillsList" : [ "Web performance optimization", "Data integration", "Code reviews" ], "softSkillsList" : [ "Mentorship", "Thought leadership", "Pair programming" ], "hardSkills" : [ { "name" : "Web performance optimization", "level" : "intermediate" }, { "name" : "Data integration", "level" : "intermediate" }, { "name" : "Code reviews", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentorship" }, { "name" : "Thought leadership" }, { "name" : "Pair programming" } ], "majorSkills" : "React, TypeScript, Next.js, Node.js", "majorSkillsList" : [ "React", "TypeScript", "Next.js", "Node.js" ], "coreResponsibilities" : "Write great code, Share expertise and knowledge, Iterate client-facing web pages, Update client-facing web flows, Perform data integrations, Contribute to design applications, Contribute to development applications, Contribute to design features, Contribute to development features, Contribute to design flows, Contribute to development flows, Optimize client's SDLC, Maintain best practices, Work full tech stack, Support adoption Next.js, Support migration Next.js, Own projects, Drive projects, Up-level the team, Provide thought leadership, Attend architecture meetings, Attend design meetings, Contribute to architecture meetings, Contribute to design meetings, Plan the roadmap, Turn product requirements into user stories, Support planning meetings, Support refinement meetings, Maintain high standards", "teamCollaboration" : "Code reviews; Knowledge sharing; Pair programming; Architecture meetings; Design meetings; Planning meetings; Refinement meetings", "projectManagementSkills" : [ "Roadmap planning", "User stories" ], "domainKnowledge" : "Financial services; Credit cards; Mortgage rates; Financial products; Financial information; Bank products; Bank services", "domainList" : [ "financial-services", "credit-cards", "mortgage-rates", "financial-products", "financial-information", "bank-products", "bank-services" ], "domainSpecificKnowledge" : [ "Financial services", "Credit cards", "Mortgage rates", "Financial products", "Financial information", "Bank products", "Bank services" ], "toolProficiency" : [ "DataDog" ], "communicationSkills" : "Written communication; Oral communication", "continuousLearning" : "Continuing education", "problemSolvingSkills" : "Break down business requests", "qualificationsBasic" : "8-10 years development experience, 1-2 years Tech Lead experience, Expertise in React, Advanced TypeScript, Expertise in Next.js, Expertise in Node.js, Mentoring engineers in TypeScript, Experience with Observability, Experience with DataDog, Experience setting up dashboards, Experience setting up monitors, Experience setting up error reporting, Experience with Web Performance, Experience with Core web vitals, Experience with caching, Experience with Critical rendering path, Experience with static generation, Experience on large-scale applications, Break down business requests", "qualificationsPreferred" : "Next.js version 13, Hands-on GraphQL experience, Knowledge of Astro.js, Experience on organically driven website, Experience with data analytics tools, Understanding complex analytics schemas, Experience with CI/CD", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Software Mind is seeking qualified candidates to fill the role of Staff/Lead Software Engineer(React/TypeScript/Next.js). In addition to a competitive salary rate and a positive work environment committed to delivering high-quality technology solutions, we also offer: * Flexible schedules and authentic work-life balance * Opportunities for continuing education * Social activities per country sponsored by the company * Birthday celebration * Payment in US Dollars About the role Our client develops a financial platform to help people find the right credit cards, mortgage rates, and various other financial service products and information to enable them to make the best financial decisions for their unique needs. We are looking for a Staff (Lead) Software Engineer with expertise in React, TypeScript, and Next.js to work on a team focused on credit card and bank-related products and services. The focus of the work is front-end development but also includes some back-end development tasks. Main Responsibilities Your work will include both hands-on development and Team Lead duties: Hands-on development duties (60%) * Write great code and be a team player who is willing to share your expertise and knowledge with others. * Iterating and updating client-facing web pages and flows that guide users toward the right company-related products to meet their needs. * Perform data integrations within the decision process to improve customer experience. * Contribute to the design and development of new applications, features, and flows to make the customer experience more intuitive and user-friendly. * Support ongoing efforts to optimize the client's end-to-end SDLC, while maintaining best practices. * Work throughout the full tech stack using React.js, TypeScript, Next.js, Node.js, GraphQL, SQL, REST API, Context API, and more. * Support the adoption and migration of Next.js, to increase speed and responsiveness * Own and drive various projects and support senior engineers driving other projects Team Lead duties (40%): * Work collaborative and help “up-level” the team through mentorship, code reviews, knowledge sharing, and pair programming as needed on complex development tasks * Be a true owner in every sense of the word as it relates to your work, responsibilities, and commitment to the team, and be an intrinsically motivated self-starter * Provide thought leadership/expertise around the right level of engineering for a given solution to help ensure projects are not “over-engineered” * Bring strong technical opinions to the table, but hold them loosely, being humble enough to let them go and move forward if group consensus goes in another direction * Attend and contribute to architecture and design meetings and discussions * Partner with the Engineering Manager to: - Plan the roadmap, turn product requirements into user stories, support planning & refinement meetings, and maintain a high standards for engineering excellence across the team ## Qualifications Job Skills/Requirements - +90% English written and oral (at least B2 level) with excellent communication skills - 8-10 years of overall development experience in a professional software engineer position - 1-2 years of experience in a Tech Lead, Team Lead, or Staff Engineer role - Expertise in React, advanced TypeScript, Next.js (preferably Next.js version 13), and Node.js - Ability to mentor other engineers in TypeScript and share knowledge/best practices - Experience with Observability: - Strong knowledge of observability tools like DataDog or similar - Experience setting up dashboards, monitors, error reporting, etc. - Experience with Web Performance - Core web vitals, caching, Critical rendering path, static generation - Experience working on large-scale production applications - Ability to take business requests and break them down into manageable steps to achieve a goal Nice to have: - Hands-on experience with GraphQL - Knowledge and understanding of Astro.js - Experience working on an organically driven website at a scale - Experience working with data analytics tools and understanding complex analytics schemas - Experience with CI/CD ## Additional Information Required Skills/Experience: • 8-10 years of overall development experience in a professional software engineer position • 1-2 years of experience in a Tech Lead, Team Lead, or Staff Engineer role • Expertise in React, advanced TypeScript, Next.js (preferably Next.js version 13), and Node.js • Ability to mentor other engineers in TypeScript and share knowledge/best practices • Experience with Observability o Strong knowledge of observability tools like DataDog or similar o Experience setting up dashboards, monitors, error reporting, etc. • Experience with Web Performance o Core web vitals, caching, Critical rendering path, static generation • Experience working on large-scale production applications Critical Technology Proficiency React, TypeScript, Next.js, Node.js, DataDog", "summaryDescription" : "[8NW] Staff Software Engineer at Software Mind. Skills: React, TypeScript, Next.js, Node.js. Write great code. Share expertise and knowledge", "postedDate" : "2026-06-12T12:30:58.000", "createdAt" : "2026-06-14T05:26:03.116", "lastUpdated" : "2026-06-15T08:29:25.526", "ingestTimestamp" : "2026-06-14T05:26:03.116", "mongoId" : "6a2cad9674d8ee00a09d2f3c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Web performance optimization", "Data integration", "Code reviews", "Mentorship", "Thought leadership", "Pair programming", "React", "TypeScript", "Next.js", "Node.js", "System design", "Roadmap planning", "User stories", "Financial services", "Credit cards", "Mortgage rates", "Financial products", "Financial information", "Bank products", "Bank services", "DataDog" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 690.03644, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e43bf8b1b0376634c922", "title" : "Customer Incident Response Program Manager", "company" : "Amazon Information Service", "industry" : "Project/Program/Product Management--Non-Tech, Program Management, Cloud Computing", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Manager in the Technology industry in Shanghai, China, adjusted for company size and specific role." }, "location" : "Shanghai, CHN", "locations" : [ "Shanghai, CHN" ], "certifications" : [ "Program or Project Management Professional Certification", "AWS certifications" ], "timestamp" : "2026-06-15T04:15:54.586", "fingerprint" : "0bc8f5195ef5bedf99b540884b8f2e95e0d85ed791a728e672725e3c046681c4", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3071459/apply", "externalId" : "1259a4c9-cf3d-4dad-ac7f-ee57866350a4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Shanghai", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "31.2312707,121.4700152" } ], "locationText" : "Shanghai, China", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "AWS, Generative AI", "professionalSkills" : [ "Security assessment", "Controls design" ], "hardSkillsList" : [ "Incident response", "Security operations" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Program management, Security", "majorSkillsList" : [ "Incident response", "Program management", "Security" ], "coreResponsibilities" : "Manage a portfolio of critical security offerings, Manage a portfolio of critical security services, Build training programs for users, Deploy training programs for users, Brief customers on AWS CIRT, Brief customers on AWS Security Incident Response service, Prioritize risk for service teams, Prioritize risk for security teams, Prioritize risk for executive leadership, Collaborate with business teams, Collaborate with service teams, Understand security assessment scope, Confirm security assessment scope, Understand controls design, Confirm controls design", "teamCollaboration" : "Cross-functional teams; Senior leadership; Security engineers; Service teams", "projectManagementSkills" : [ "Program management", "Project management", "Roadmap management", "Strategic planning" ], "domainKnowledge" : "Cloud security; Incident response; Security operations", "domainList" : [ "cloud-security", "incident-response", "security-operations" ], "domainSpecificKnowledge" : [ "Cloud security", "Incident response", "Security operations" ], "communicationSkills" : "Executive level communication", "innovationCreativity" : "Pioneer security solutions", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "8+ years program management experience, Experience using data and metrics, Experience owning program strategy, 5+ years Program or Project Management experience in Security domain, Experience managing enterprise-level projects, Experience managing continuous improvement programs", "qualificationsPreferred" : "2+ years driving process improvements, Master's degree or MBA, Experience owning cross-team security implementation programs, Experience driving operational security programs, Experience driving secure software development lifecycle programs, Experience working in security operations environment, Active project management certification, Agile management certification, AWS experience, AWS certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale incident response solutions in the cloud? Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? As a member of the AWS Customer Incident Response Team (CIRT) in the AWS Global Service Security (GSS) you will have the opportunity to help customers respond to security incidents and pioneer technically superb security solutions to help customer operate securely in the cloud. Within this team, AWS CIRT is seeking a self-motivated leader with rich experience in customer service and interested in improving the way products are brought to market and distributed on a global scale to join us as a Program Manager for China. AWS CIRT is looking for a skilled and motivated senior Program Manager to expand the security program that responds to customer security incidents at scale. You will manage the roadmap and apply strong judgement that balances immediate security campaigns with longer-term, strategic planning. This role is inherently cross-functional, working closely with senior leadership, security engineers, and dozens of service teams. A successful candidate will have a good mix of deep technical security knowledge and a demonstrated track record of successful complex and large scale program/project deliveries. Key job responsibilities • A proven track record of implementing, delivering large projects and communicating effectively at executive level • Manage a portfolio of critical security offerings and services that are internal and external facing • Excellent program and project management skills, with the ability to work in a fast-paced environment • Effective prioritization of tasks, and seamless operation across organizational boundaries • Building and deploying training programs for all users in the Greater China Region • Brief customers on AWS CIRT and AWS Security Incident Response service • Continuously prioritize risk for service teams, security teams, and executive leadership • Collaborate with business/service teams to understand and confirm security assessment scope and controls design About the team This role will be to join the AWS Customer Incident Response Team (CIRT) aka Zipline - https://w.amazon.com/bin/view/AWS/Teams/GlobalServicesSecurity/TDIR/Zipline Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 8+ years of program or project management experience - Experience using data and metrics to determine and drive improvements - Experience owning program strategy, end to end delivery, and communicating results to senior leadership - 5+ years of Program or Project Management experience managing enterprise-level projects and continuous improvement programs in the Security domain. - Program or Project Management Professional Certification Preferred Qualifications: - 2+ years of driving process improvements experience - Master's degree, or MBA in business, operations, human resources, adult education, organizational development, instructional design or related field - Experience in owning cross-team security implementation programs inclusive of metrics, communications and prioritization. - Experience driving operational security and secure software development lifecycle programs. - Experience working in a security operations environment. - Have at least one active project or agile management certification. - AWS experience and/or relevant certifications. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Customer Incident Response Program Manager at Amazon Information Service. Skills: Incident response, Program management, Security. Manage a portfolio of critical security offerings. Manage a portfolio of critical security services", "postedDate" : "2026-06-13T10:08:25.455", "createdAt" : "2026-06-13T10:08:25.455", "lastUpdated" : "2026-06-15T04:15:54.586", "ingestTimestamp" : "2026-06-13T10:08:25.455", "mongoId" : "68c2e43bf8b1b0376634c922", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3071459/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Security operations", "Leadership", "Program management", "Security", "Security assessment", "Controls design", "Project management", "Roadmap management", "Strategic planning", "Cloud security", "Program or Project Management Professional Certification", "AWS certifications" ], "skillCount" : 13, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 687.61884, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a308bd0f292fd229c09a639", "title" : "Consultant Cybersécurité Junior – SecOps / SOC Applicatif (H/F)", "company" : "EVERIENCE", "industry" : "Computer Networking", "salary" : { "min" : 38000.0, "max" : 48000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Junior Cybersecurity Consultant in Lyon, France, adjusted for industry and company size." }, "location" : "Lyon, Auvergne-Rhône-Alpes, France", "locations" : [ "Lyon", "Auvergne-Rhône-Alpes", "France" ], "timestamp" : "2026-06-16T12:46:26.361", "fingerprint" : "b211e1048d35e9defd8c363ddfd03d2b8efa01d3385191521392d86bf614b935", "source" : "smartrecruiters", "language" : "fr", "applyUrl" : "https://jobs.smartrecruiters.com/EVERIENCE/744000132191144-consultant-cybersecurite-junior-secops-soc-applicatif-h-f-", "externalId" : "744000132191144", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lyon", "state" : "Auvergne-Rhône-Alpes", "country" : "France", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "45.7578137,4.8320114" } ], "locationText" : "Lyon, Auvergne-Rhône-Alpes, France", "employmentType" : "CONTRACT", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "Cybersécurité, DevOps, Data, ISO, OWASP, Réseau, DMZ, Firewall, DLP", "professionalSkills" : [ "Gestion des incidents", "Analyse des alertes", "Analyse approfondie", "Suivi des plans", "Traitement des demandes", "Validation des habilitations", "Gestion des dérogations", "Ouverture de flux", "Tests d’intrusion", "Contrôles de sécurité", "Surveillance" ], "hardSkillsList" : [ "Gestion des incidents", "Analyse des alertes", "Analyse approfondie", "Suivi des plans", "Traitement des demandes", "Validation des habilitations", "Gestion des dérogations", "Ouverture de flux", "Tests d’intrusion", "Contrôles de sécurité", "Surveillance" ], "hardSkills" : [ { "name" : "Gestion des incidents", "level" : "intermediate" }, { "name" : "Analyse des alertes", "level" : "intermediate" }, { "name" : "Analyse approfondie", "level" : "intermediate" }, { "name" : "Suivi des plans", "level" : "intermediate" }, { "name" : "Traitement des demandes", "level" : "intermediate" }, { "name" : "Validation des habilitations", "level" : "intermediate" }, { "name" : "Gestion des dérogations", "level" : "intermediate" }, { "name" : "Ouverture de flux", "level" : "intermediate" }, { "name" : "Tests d’intrusion", "level" : "intermediate" }, { "name" : "Contrôles de sécurité", "level" : "intermediate" }, { "name" : "Surveillance", "level" : "intermediate" } ], "majorSkills" : "SecOps, SOC Applicatif, Cybersécurité, Gestion des incidents", "majorSkillsList" : [ "SecOps", "SOC Applicatif", "Cybersécurité", "Gestion des incidents" ], "coreResponsibilities" : "Analyser incidents signalés, Traiter incidents signalés, Exploiter alertes SOC applicatif, Exploiter journaux supervision, Prendre en charge alertes DLP, Réaliser analyses approfondies, Assurer suivi plans d’action, Répondre demandes opérationnelles, Examiner habilitations sensibles, Valider habilitations sensibles, Gérer demandes dérogation, Étudier ouvertures flux réseau, Étudier ouvertures flux web, Encadrer demandes tests d’intrusion, Mettre en œuvre contrôles sécurité, Suivre indicateurs sécurité, Analyser écarts indicateurs", "teamCollaboration" : "Équipe dédiée; Équipe soudée", "domainKnowledge" : "Cybersécurité opérationnelle; SOC Applicatif; Gestion des incidents; Protection des données; Environnements réseau; Principes de sécurité; Gestion des habilitations", "domainList" : [ "cybersecurite-operationnelle", "soc-applicatif", "gestion-des-incidents", "protection-des-donnees", "environnements-reseau", "principes-de-securite", "gestion-des-habilitations" ], "domainSpecificKnowledge" : [ "Cybersécurité opérationnelle", "SOC Applicatif", "Gestion des incidents", "Protection des données", "Environnements réseau", "Principes de sécurité", "Gestion des habilitations" ], "toolProficiency" : [ "SOC", "CERT", "DLP" ], "communicationSkills" : "Communication écrite; Communication orale", "continuousLearning" : "Formation", "problemSolvingSkills" : "Esprit d’analyse", "specialRequirements" : "Pas de déplacements, Pas d’astreintes week-end", "qualificationsBasic" : "Expérience 1 à 3 ans post diplôme, Connaissances base cybersécurité, Compréhension environnements réseau, Notions gestion habilitations", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Avec une double expertise en Data et DevOps, Size Up Consulting permet d’accélérer la transition digitale des entreprises et de transformer l’information en véritable levier stratégique. Dans une ère augmentée par l’IA, sa mission est claire : aider les organisations à maîtriser, structurer et valoriser leur patrimoine data ; et accélérer l’innovation ainsi que le time-to-market. Ses 200 consultants accompagnent les entreprises dans la structuration d’une culture data-driven et la construction d’architectures souveraines capables de générer valeur, efficacité et compétitivité durable. Size Up Consulting fait partie d’Everience, groupe international de conseil et de services numériques augmentés, pionnier de la symbiose Homme-IA en entreprise. Dans le cadre du renforcement de ses activités de cybersécurité opérationnelle, notre client recherche un consultant junior pour intervenir sur des activités SecOps et SOC applicatif. Le poste s’inscrit au sein d’une équipe dédiée à la gestion des incidents de sécurité et au maintien en condition opérationnelle des dispositifs de protection du système d’information. Missions * Gestion des incidents de sécurité * Analyser et traiter les incidents signalés par le SOC, le CERT ou les utilisateurs * Exploiter les alertes du SOC applicatif ainsi que les journaux issus des outils de supervision * Prendre en charge les alertes liées à la protection des données (DLP) * Réaliser des analyses approfondies en cas de comportements suspects * Assurer le suivi des plans d’action après incident * Traitement des demandes de cybersécurité * Répondre aux demandes opérationnelles des utilisateurs * Examiner et valider les habilitations sensibles * Gérer les demandes de dérogation aux règles de sécurité * Étudier les ouvertures de flux réseau et web * Encadrer les demandes de tests d’intrusion * Contrôles et surveillance * Mettre en œuvre des contrôles de sécurité de premier niveau * Suivre les indicateurs de sécurité et analyser les écarts ## Qualifications Profil recherché Compétences techniques * Expérience de 1 à 3 ans post diplôme * Connaissances de base en cybersécurité (normes ISO, OWASP...) * Compréhension des environnements réseau (DMZ, firewall, principes de sécurité) * Notions de gestion des habilitations Qualités personnelles * Esprit d’analyse et sens du détail * Rigueur et organisation * Bonne communication écrite et orale Conditions * Poste basé à Lyon en hybride (2j TT) * Pas de déplacements à prévoir * Pas d’astreintes le week-end ## Additional Information Chez nous : mutuelle & transports à 50%, tickets restaurant (9,5€ à 60%), primes cooptation 1000€, CSE, intégration 2 semaines, formation, mobilité, équipe soudée, rentabilité et croissance. Nous pouvons vous accompagner dans votre mobilité géographique ! De Marseille à Nantes ou de Strasbourg à Angers, nous mettrons notre réseau à votre service pour faciliter au maximum votre arrivée dans la région. Tous nos postes se conjuguent au féminin et au masculin et sont bien évidemment ouverts aux personnes en situation de handicap.", "summaryDescription" : "Consultant Cybersécurité Junior – SecOps / SOC Applicatif (H/F) at EVERIENCE. Skills: SecOps, SOC Applicatif, Cybersécurité, Gestion des incidents. Analyser incidents signalés. Traiter incidents signalés", "postedDate" : "2026-06-15T12:38:23.000", "createdAt" : "2026-06-16T03:32:08.389", "lastUpdated" : "2026-06-16T12:46:26.361", "ingestTimestamp" : "2026-06-16T03:32:08.389", "mongoId" : "6a308bd0f292fd229c09a639", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Gestion des incidents", "Analyse des alertes", "Analyse approfondie", "Suivi des plans", "Traitement des demandes", "Validation des habilitations", "Gestion des dérogations", "Ouverture de flux", "Tests d’intrusion", "Contrôles de sécurité", "Surveillance", "SecOps", "SOC Applicatif", "Cybersécurité", "Cybersécurité opérationnelle", "Protection des données", "Environnements réseau", "Principes de sécurité", "Gestion des habilitations", "SOC", "CERT", "DLP" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 1.0, "_score" : 678.18665, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cc3ac74d8ee00a0a0a0cb", "title" : "Incident Management Engineer, Incident Detection and Response", "company" : "Amazon Support Services Costa Rica SRL", "industry" : "Operations, IT, Support Engineering, Cloud Computing", "salary" : { "min" : 2.4E7, "max" : 3.6E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Incident Management Engineer in Heredia, Costa Rica, adjusted for the technology industry and company size." }, "location" : "Heredia, Heredia, CRI", "locations" : [ "Heredia, Heredia, CRI" ], "certifications" : [ "AWS Associate level certification", "AWS Professional level certification" ], "timestamp" : "2026-06-15T11:37:34.226", "fingerprint" : "5d9fa2a124987689dce9a3778556aa78ee2ede923573d115e5b96c169fc67d88", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10448063/apply", "externalId" : "31abe20c-5f53-4481-9de0-d8720e3bd201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Heredia", "state" : "Heredia", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9984272,-84.1171215" } ], "locationText" : "Heredia, Heredia, Costa Rica", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS", "professionalSkills" : [ "Incident Management", "Customer ownership", "Account ownership" ], "hardSkillsList" : [ "Incident response", "Technical resolution" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Technical resolution", "level" : "intermediate" } ], "majorSkills" : "Incident Management, Incident Response, Customer Engagement", "majorSkillsList" : [ "Incident Management", "Incident Response", "Customer Engagement" ], "coreResponsibilities" : "Drive resolution large scale incidents, Provide critical incident response, Lead calls internal/external participants, Monitor manage communications high impact events, Collaborate key stakeholders AWS, Improve customer experience, Develop mechanisms support operational excellence, Create review design procedures, Influence new standard operating procedures, Identify troubleshoot recurring platform issues, Own projects drive improvements, Mentor peers technical strength, Mentor peers operational strength", "teamCollaboration" : "Engineering Teams; Key stakeholders AWS", "domainKnowledge" : "Mission critical applications; Critical workloads", "domainList" : [ "mission-critical-applications", "critical-workloads" ], "domainSpecificKnowledge" : [ "Mission critical applications", "Critical workloads" ], "communicationSkills" : "Written communication; Verbal communication", "documentationSkills" : "Runbooks; Response plans", "problemSolvingSkills" : "Troubleshoot recurring issues", "specialRequirements" : "Work weekends, Work public holidays", "outcomesObjectives" : "Reduce potential for failure; Accelerate recovery critical workloads; Detect engage customers 5 minutes; Engage customers call bridge 5 minutes", "qualificationsBasic" : "Speak, write, read fluently Spanish, 3+ years systems engineering, 3+ years technical support, Bachelor's degree equivalent, Experience English communication, 3+ years Major Incident/Problem Management", "qualificationsPreferred" : "AWS Associate level certification, AWS Professional level certification, Knowledge Lean methodologies, Knowledge distributed architectures, Knowledge service-oriented architectures, Review complex technical details, Convey key details senior stakeholders", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The AWS Incident Detection and Response team is part of the ASPIRE organization within AWS Support, and is dedicated to offering eligible AWS Enterprise Support customers proactive engagement and incident management to reduce the potential for failure and to accelerate recovery of critical workloads from disruption. We achieve these objectives by working closely with customers to develop runbooks and response plans customized to the context of each workload onboarded to the service. Onboarded workloads are monitored 24x7 by a team of Incident Management Engineers (IMEs) to detect and engage customers on a call bridge within 5 minutes of a critical alarm. AWS Support is looking for a leader with a strong background in Incident Management and customer ownership to be there during the moments that matter for our most critical customers. We are looking for an Incident Management Engineer to join our team to provide incident response and account ownership. In this position, you will play a pivotal role in providing communication, emergency response, technical resolver engagement and incident management for our customers. This is a global role that requires excellent written and verbal communication skills and a passion and desire for leading the resolution of critical incidents. Your decisions are not only fundamental to helping protect our most critical customers but will help maintain the health of AWS customers worldwide. Please note as a follow-the-sun organization. Successful applicants will be required to work some weekends (Sunday to Thursday, or Tuesday to Saturday), and public holidays. Key job responsibilities - Drive the resolution of large scale customer impacting incidents or escalations in situations that are sometimes technically challenging in collaboration with Engineering Teams. - Provide critical incident response/management (including leading calls with internal/external participants) for customer’s critical workloads - Monitor and manage communications during high impact events via relevant channels - Collaborate with key stakeholders across AWS to improve the customer experience and develop mechanisms that support operational excellence - Create and review documentation; design/influence new standard operating procedures - Identify and troubleshoot recurring platform issues and own projects to drive improvements - Mentor peers in your areas of technical and operational strength About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Basic Qualifications: - Speak, write, and read fluently in Spanish - 3+ years of systems engineering, or 3+ years of technical support experience - Bachelor's degree or equivalent, or experience in a relevant field - Experience in English-language communication skills, both written and verbal - 3+ years demonstrable Major Incident/Problem Management Experience for organizations that run mission critical applications Preferred Qualifications: - AWS Associate level certification, or AWS Professional level certification - Knowledge of Lean methodologies - Knowledge of distributed and service-oriented architectures - Ability to review complex technical details regarding ongoing issues/events and convey the key details to senior stakeholders to facilitate real-time decision making Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Incident Management Engineer, Incident Detection and Response at Amazon Support Services Costa Rica SRL. Skills: Incident Management, Incident Response, Customer Engagement. Drive resolution large scale incidents. Provide critical incident response", "postedDate" : "2026-06-12T00:00:00.000", "createdAt" : "2026-06-14T05:24:42.339", "lastUpdated" : "2026-06-15T11:37:34.226", "ingestTimestamp" : "2026-06-14T05:24:42.339", "mongoId" : "6a2cc3ac74d8ee00a0a0a0cb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10448063/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Technical resolution", "Incident Management", "Incident Response", "Customer Engagement", "Customer ownership", "Account ownership", "Mission critical applications", "Critical workloads", "AWS Associate level certification", "AWS Professional level certification" ], "skillCount" : 11, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 670.20856, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69d5e4962beec4dd3d931981", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 136000.0, "max" : 184000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:08:07.757", "fingerprint" : "0c97d9ed2d550c199650d60b2166fb48eb0e947fd71728e016fa19334f04915f", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385139/apply", "externalId" : "f0a1c5b4-3fd4-4296-8fb3-027521c0d98b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence", "professionalSkills" : [ "Risk assessment", "Information security" ], "hardSkillsList" : [ "Log analysis", "Forensics", "System development", "Tool development" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System development", "level" : "intermediate" }, { "name" : "Tool development", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design security responses, Coordinate security responses, Build security utilities, Build security tools, Communicate effectively, Instill best practices", "teamCollaboration" : "Multiple teams across organization; Security engineers", "domainKnowledge" : "Cloud security; National security program", "domainList" : [ "cloud-security", "national-security-program" ], "domainSpecificKnowledge" : [ "Cloud security", "National security program" ], "communicationSkills" : "Communicate at multiple levels", "problemSolvingSkills" : "Think like attacker; Think like defender", "specialRequirements" : "On-call responsibilities, US Citizen, TS/SCI with polygraph", "qualificationsBasic" : "Associate's degree or above, GCIH or GSEC or Security+, Current, active US Government Security Clearance of TS/SCI with Polygraph, US Citizen", "qualificationsPreferred" : "Experience with AWS products and services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing virtual infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities You should be able to accomplish most of the following: - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Associate's degree or above - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - Experience with AWS products and services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 136,000.00 - 184,000.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T01:35:14.469", "createdAt" : "2026-06-13T01:35:14.469", "lastUpdated" : "2026-06-15T02:08:07.757", "ingestTimestamp" : "2026-06-13T01:35:14.469", "mongoId" : "69d5e4962beec4dd3d931981", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385139/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 184000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Forensics", "System development", "Tool development", "Leadership", "Incident response", "Security operations", "Cloud security", "Risk assessment", "Information security", "National security program", "GCIH", "GSEC", "Security+" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 666.4851, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a660774d8ee00a062b91f", "title" : "Incident Management Engineer (Portuguese/English bilingual), Incident Detection and Response", "company" : "Amazon Web Services", "industry" : "Operations, IT, Support Engineering, Cloud Computing", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Incident Management Engineer in Sydney, Australia, adjusted for the technology industry and a large company size." }, "location" : "Sydney, New South Wales, AUS", "locations" : [ "Sydney, New South Wales, AUS" ], "certifications" : [ "AWS Associate level certifications" ], "timestamp" : "2026-06-15T03:55:52.053", "fingerprint" : "25ae37cc0beb9911eb9aef47f1c37b8ceda01b802af3283a76e5dbf14e970920", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443072/apply", "externalId" : "c7b14860-3b9e-4d9a-9511-058ca0f602ec", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Sydney", "state" : "New South Wales", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8698439,151.2082848" } ], "locationText" : "Sydney, New South Wales, Australia", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS", "professionalSkills" : [ "Incident Management", "Customer Ownership", "Account Ownership", "Problem Solving", "Strategic Planning" ], "hardSkillsList" : [ "Incident Response", "Customer Engagement", "Technical Troubleshooting", "Process Improvement" ], "softSkillsList" : [ "Leadership", "Mentoring", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident Response", "level" : "intermediate" }, { "name" : "Customer Engagement", "level" : "intermediate" }, { "name" : "Technical Troubleshooting", "level" : "intermediate" }, { "name" : "Process Improvement", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident Management, Customer Support, Technical Resolution", "majorSkillsList" : [ "Incident Management", "Customer Support", "Technical Resolution" ], "coreResponsibilities" : "Drive resolution of customer impacting incidents, Drive customer escalations, Provide incident response/management, Lead calls with participants, Contribute to Problem Records, Conduct real-time proactive monitoring, Prioritize and manage customer issues, Monitor communications during high impact events, Collaborate with AWS stakeholders, Improve customer experience, Develop operational excellence mechanisms, Lead projects to drive improvements, Create and review design, Influence new standard operating procedures, Identify and troubleshoot platform issues, Own projects to drive improvements, Mentor peers, Perform other duties", "teamCollaboration" : "Collaboration with Engineering Teams; Work with key stakeholders", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Mission critical applications; Distributed architectures", "domainList" : [ "mission-critical-applications", "distributed-architectures" ], "domainSpecificKnowledge" : [ "Mission critical applications", "Distributed architectures" ], "communicationSkills" : "Written communication; Verbal communication; Oral communication; Professional communication", "documentationSkills" : "Develop runbooks; Develop response plans", "problemSolvingSkills" : "Analytical acumen; Dive deep to solve complex problems; Logical problem solving", "specialRequirements" : "Work weekends, Work public holidays", "outcomesObjectives" : "Reduce potential for failure; Accelerate recovery of critical workloads", "qualificationsBasic" : "Business level Portuguese and English, 3+ years Major Incident / Problem Manager Experience, 5+ years Support Engineering, Network Engineering, Solutions Architecture, or similar IT role, Bachelor's degree in CS, Info Sci/Tech, Comm Eng, Business, or related field (or 6+ years relevant work experience)", "qualificationsPreferred" : "AWS Associate level certifications, Knowledge of ITIL/Lean Processes, Ability to work in ambiguous environments, Demonstrated critical thinking and logical problem solving skills, Experience driving collaborative projects, Familiarity operating or designing distributed architectures, Ability to review technical details and convey to stakeholders", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon has built a reputation for excellence with a mission to be the earth’s most customer-centric company, a company that customers from all over the globe will recognize, value, and trust for both our products and our service. Amazon Web Services (AWS) is carrying on that tradition while leading the world in cloud technologies. The AWS Incident Detection and Response team is part of the ASPIRE organisation within AWS Support, and is dedicated to offering eligible AWS Enterprise Support customers proactive engagement and incident management to reduce the potential for failure and to accelerate recovery of critical workloads from disruption. We achieve these objectives by working closely with customers to develop runbooks and response plans customized to the context of each workload onboarded to the service. Onboarded workloads are monitored 24x7 by a team of Incident Management Engineers (IMEs) to detect and engage customers on a call bridge within 5 minutes of a critical alarm. ABOUT YOU Incident Management Engineers have a broad skill set with demonstrated career progression and a proven track record of delivering results. The successful candidate will possess strong analytical acumen, solid technology experience, superb business judgment, strategic account ownership and a propensity to dive deep to solve complex problems. You will also have a passion for creating/providing a world class experience for our customers. The candidate must understand the competitive and industry landscape and must have the leadership presence and communication skills to effectively work with customers at all levels of their organization. You must be a self-starter and able to execute at both a tactical and strategic level – with a strong attention to detail. This is a global role that requires excellent written and verbal communication skills and a passion and desire for leading the resolution of critical incidents. Your decisions are not only fundamental to helping protect our most critical customers but will help maintain the health of AWS customers worldwide. Finally, you are passionate about technology with a desire to learn more and do more with AWS. ABOUT THE ROLE AWS Support is looking for a leader with a strong background in Incident Management and customer ownership to be there during the moments that matter for our most critical customers. We are looking for an Incident Management Engineer to join our team to provide incident response and account ownership. In this position, you will play a pivotal role in providing communication, emergency response, technical resolver engagement and incident management for our customers. Please note as a follow-the-sun organisation, IMEs work the core hours of 9am-5pm AEST. Successful applicants will be required to work some weekends (Sunday to Thursday, or Tuesday to Saturday), and public holidays. Key job responsibilities - Every day will bring new and exciting challenges that include elements of: - Drive the resolution of large scale customer impacting incidents as part of a team rotation - Drive critical, complex customer escalations in situations that are sometimes technically challenging in collaboration with Engineering Teams. - Provide critical incident response/management (including leading calls with internal/external participants) for customer’s critical workloads - Contribute to Problem Records for customers - Conduct continuous real-time proactive monitoring of customer metrics - Prioritize, manage, and own emerging and developing customer issues from start to finish - Monitor and manage communications during high impact events via relevant channels - Collaborate with key stakeholders across AWS to improve the customer experience and develop mechanisms that support operational excellence - Lead projects and teams to drive operational improvements - Create and review documentation; design/influence new standard operating procedures - Identify and troubleshoot recurring platform issues and own projects to drive improvements - Mentor peers in your areas of technical and operational strength - Perform other duties as required by the organization About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Basic Qualifications: - Business level Portuguese and English, verbal and written - 3+ years demonstrable Major Incident / Problem Manager Experience for organizations that run mission critical applications - 5+ years of experience in Support Engineering, Network Engineering, Solutions Architecture, or similar IT role. - Bachelor’s degree in Computer Science, Information Science/Technology, Communications Engineering, Business, or a related field (or 6+ years of relevant work experience) - Professional oral and written communication skills, presenting to an audience containing one or more executive team member(s) Preferred Qualifications: - Industry specific accredited certification(s) such as the AWS Associate level certifications - Knowledge of ITIL/Lean Processes - Ability to work in ambiguous environments - Demonstrated critical thinking and logical problem solving skills - Experience driving collaborative projects from conception to delivery - Familiarity operating or designing distributed architectures with the ability to correlate system behaviors based on known inter-dependencies - Ability to review complex technical details regarding ongoing issues/events and convey the key details to senior stakeholders to facilitate real-time decision making Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Incident Management Engineer (Portuguese/English bilingual), Incident Detection and Response at Amazon Web Services. Skills: Incident Management, Customer Support, Technical Resolution. Drive resolution of customer impacting incidents. Drive customer escalations", "postedDate" : "2026-06-13T08:34:45.450", "createdAt" : "2026-06-13T08:34:45.450", "lastUpdated" : "2026-06-15T03:55:52.053", "ingestTimestamp" : "2026-06-13T08:34:45.450", "mongoId" : "6a2a660774d8ee00a062b91f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443072/apply", "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Incident Response", "Customer Engagement", "Technical Troubleshooting", "Process Improvement", "Leadership", "Mentoring", "Critical thinking", "Incident Management", "Customer Support", "Technical Resolution", "Customer Ownership", "Account Ownership", "Problem Solving", "Strategic Planning", "Project management", "Mission critical applications", "Distributed architectures", "AWS Associate level certifications" ], "skillCount" : 18, "jobCategory" : "operations", "dataQualityScore" : 0.8888889, "_score" : 665.7566, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Technologies" }, { "id" : "6a304ff3f292fd229ceeb35b", "title" : "Senior Cyber Incident Response Engineer", "company" : "NBCUniversal", "industry" : "Entertainment", "salary" : { "min" : 175000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Orlando, FL, United States", "locations" : [ "Orlando", "FL", "United States" ], "timestamp" : "2026-06-16T06:55:39.866", "fingerprint" : "746b9f340fa8ffe7b3274fe7bfe97bbdcbef24cfa844a56bff697d83ba9fe3ec", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/NBCUniversal3/744000131667619-senior-cyber-incident-response-engineer", "externalId" : "744000131667619", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Orlando", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "28.5421218,-81.3790450" }, { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "Orlando, Florida, United States; United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our global theme park destinations, consumer products, and experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through our powerhouse film and television studios, including Universal Pictures, DreamWorks Animation, and Focus Features, and the four global television studios under the Universal Studio Group banner, and operate industry-leading theme parks and experiences around the world through Universal Destinations & Experiences, including Universal Orlando Resort, home to Universal Epic Universe, and Universal Studios Hollywood. NBCUniversal is a subsidiary of Comcast Corporation. Visit www.nbcuniversal.com for more information. Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world. We are seeking a Senior Cyber Incident Response Engineer to design, automate, integrate, and continuously improve the technical systems, workflows, and tooling used to detect, investigate, contain, and recover from cybersecurity incidents. This role combines hands-on response engineering with incident readiness and operational improvement, helping ensure responders have the automation, telemetry, access, and processes needed to act quickly and effectively. The ideal candidate brings strong incident response and DFIR expertise, practical engineering skill, and the ability to turn repeated operational pain points into scalable, reliable capabilities that improve response quality and reduce time to action. Key Responsibilities: * Design, build, and improve automated evidence collection capabilities that increase the speed, consistency, and completeness of incident investigations. * Create and maintain SOAR playbooks that orchestrate investigation, enrichment, containment, notification, and recovery workflows. * Integrate SIEM, EDR, IAM, cloud, email, case management, and threat intelligence platforms to enable unified response actions and stronger analyst context. * Develop and deploy response tooling that may utilize AI to improve response capabilities across cloud, endpoint, identity, SaaS, email, and data platforms. * Develop scripts, tools, and integrations that support triage, containment, enrichment, forensic collection, and operational response workflows. * Ensure responders have the logs, telemetry, access, and tooling needed to investigate and respond without unnecessary delay. * Build dashboards, operational views, and incident metrics that measure response performance, workflow health, and process effectiveness. * Identify repeated manual analyst tasks and turn them into safe, scalable, and repeatable automation. * Review incident response plans, identify readiness gaps, and help develop practical strategies to improve preparedness. * Design and optimize incident response playbooks aligned to relevant threats, operating models, and business needs to allow for quick identification and response to potential incidents. * Collaborate with Response Operations and Automation team stakeholders for prioritization, automation creation, and integrations with security tooling * Facilitate or support tabletop exercises, drills, and readiness activities to validate plans and improve operational performance. * Lead or support complex investigations involving host, network, identity, email, and cloud artifacts to determine nature, scope, and root cause. * Partner with cross-functional teams to guide containment, remediation, recovery, and post-incident improvement activities. * Brief technical teams and leadership on findings, risks, recommendations, and response decisions during and after incidents. * Contribute to incident response standards, methodologies, documentation, and internal knowledge sharing. * Participate in an incident response on-call rotation, including weekend coverage, as required. ## Qualifications Requirements: * 5+ years of relevant cybersecurity experience in either incident response, DFIR, detection engineering, threat hunting, and or SOC escalation * 2+ years of security automation / cyber defense engineering * Strong proficiency with Python, PowerShell, Bash, or similar scripting languages used for automation and response engineering. * Ability to lead projects with little guidance, and strong communication * Knowledge of SIEM, SOAR, EDR, Data Lake, and enterprise security tooling and methodologies. * Experience handling security incidents and investigating a multitude of cyber threats with various TTPs across multiple enterprise platforms * Experience building and maintaining API integrations across security and enterprise platforms. * Working knowledge of SIEM query languages such as SPL, KQL, SQL, or equivalent analytics languages. * Experience with EDR response actions, investigation workflows, and endpoint containment techniques. * Experience designing, building, or operating SOAR platforms and automated playbooks. * Strong understanding of endpoint, identity, network, cloud, email, and SaaS telemetry, including logging, evidence collection, and containment actions across modern environments. * Experience collecting and using forensic artifacts to support investigations across endpoints, identities, cloud services, email, or SaaS platforms. * Ability to design for scale, repeatability, automation, reliability, and reduced response time in a production security environment. * Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Digital Forensics, or a related field, or equivalent practical experience. Desired Characteristics: * 7+ years of relevant cybersecurity or security operations experience. * Demonstrated ownership of incident response engineering, automation, forensic collection, containment workflows, or large-scale security operations improvements. * Experience conducting threat intelligence, threat detection, malware analysis, or forensic analysis in security incidents as a team * Experience building and leveraging AI-assisted tooling in investigation or triage workflows for a large, distributed enterprise environment * Experience integrating case management, email security, identity platforms, cloud services, and threat intelligence into response workflows. * Experience building analyst-facing dashboards, metrics, and reporting that show operational health and response effectiveness. * Strong understanding of cloud technologies, AI agents, and LLMs * Familiarity with secure automation guardrails, approval models, and change control for containment actions. * Experience with detection engineering and the operationalization of alerts, enrichments, and response workflows. * Experience improving responder access to logs, telemetry, and investigative tooling across multiple security domains. * Relevant certifications are preferred rather than required. Preferred certifications may include GCIH, GCFA, GCFE, GNFA, EnCE, CFCE, GCIA, GSEC, CySA+, Blue Team Level 2, AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer, CISSP, CISM, GPEN, OSCP, or PNPT. Additional Requirements: * Fully Remote: This position has been designated as fully remote, meaning that the position is expected to contribute from a non-NBCUniversal worksite, most commonly an employee’s residence. This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. Salary range: $140,000 - $175,000 (bonus eligible) ## Additional Information As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing AccessibilitySupport@nbcuni.com. For LA County and City Residents Only: NBCUniversal will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.", "summaryDescription" : "Senior Cyber Incident Response Engineer at NBCUniversal", "postedDate" : "2026-06-11T13:00:15.000", "createdAt" : "2026-06-15T21:38:50.406", "lastUpdated" : "2026-06-16T06:55:39.866", "ingestTimestamp" : "2026-06-15T21:38:50.406", "mongoId" : "6a304ff3f292fd229ceeb35b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 663.7061, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Media", "llmIndustryConfidence" : 0.98 }, { "id" : "6a3060aff292fd229cf92a1a", "title" : "Automation Engineer", "company" : "Nebius", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Automation Engineer in the US Technology industry, adjusted for remote work and company size." }, "location" : "Remote - United States", "locations" : [ "Remote - United States" ], "timestamp" : "2026-06-16T09:32:39.565", "fingerprint" : "c858d230b27273f5740785a46a8b842e6f41ee3ac3261e75337f4132a652a257", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.nebius.com/?gh_jid=4885483101", "externalId" : "4885483101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R& D. Requirements 3+ years of hands-on experience in automation, scripting, or IT infrastructure in enterprise environments. Strong experience with: Microsoft Entra ID and Microsoft 365 ecosystem Google Workspace (basic administration) Hands-on experience with: RESTful APIs and system integrations PowerShell, Python Azure services (Automation, Functions, Logic Apps) Strong understanding of: Automation patterns (event-driven, scheduled workflows) SaaS integrations and API-based workflows Authentication basics (OAuth, OpenID Connect) Familiarity with tools like Slack, Jira, or similar SaaS platforms, Git, and basic CI/CD. Strong troubleshooting and problem-solving skills. Intermediate English (written and spoken). Responsibilities Design, build, and maintain automation workflows across IT systems and SaaS platforms. Develop integrations between Microsoft services, Google Workspace, and other tools using APIs. Automate operational tasks (user management, notifications, data sync, access workflows). Implement reliable and secure automation (logging, monitoring, error handling). Optimize existing processes to reduce manual work and improve efficiency. Collaborate with IT, Security, and business teams to deliver automation solutions. Document workflows, scripts, and integrations. Nice to Have Experience with: Slack API / Atlassian (Jira, Confluence) Microsoft Graph API Google Admin SDK Knowledge of Azure Monitor / Log Analytics. Experience in large-scale or multi-system environments. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.", "summaryDescription" : "Automation Engineer at Nebius", "postedDate" : "2026-06-15T23:28:29.326", "createdAt" : "2026-06-15T23:28:29.326", "lastUpdated" : "2026-06-16T09:32:39.565", "ingestTimestamp" : "2026-06-15T23:28:29.326", "mongoId" : "6a3060aff292fd229cf92a1a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 663.3539, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20c74d8ee00a09df54e", "title" : "Intermediate SecOps Engineer", "industry" : "IT", "salary" : { "min" : 50000.0, "max" : 75000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : false }, "location" : "Canada", "locations" : [ "Canada" ], "certifications" : [ "Security+", "CEH", "Cloud security credentials" ], "timestamp" : "2026-06-16T00:42:07.867", "fingerprint" : "8ae7b1e6a9aa96c27b732f4941dfae7a5aa04e4cb6282311307da22884b2005f", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/76cd4faa-c967-41c3-a8c8-9309fd68b99a/apply", "externalId" : "76cd4faa-c967-41c3-a8c8-9309fd68b99a", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "SIEM, AWS, Azure, GCP, Docker, Kubernetes, OpenShift, OKD", "professionalSkills" : [ "Threat hunting", "Incident response", "Detection engineering" ], "hardSkillsList" : [ "Security monitoring", "Alert triage", "Vulnerability management", "Log aggregation", "IAM" ], "softSkillsList" : [ "Analytical", "Problem-solving" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Log aggregation", "level" : "intermediate" }, { "name" : "IAM", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical" }, { "name" : "Problem-solving" } ], "majorSkills" : "Security monitoring, Incident response, Threat hunting, Security tooling", "majorSkillsList" : [ "Security monitoring", "Incident response", "Threat hunting", "Security tooling" ], "coreResponsibilities" : "Develop security monitoring systems, Maintain security monitoring systems, Improve security monitoring systems, Participate in incident response, Conduct threat hunting, Conduct security investigations, Operate security tooling, Enhance security tooling, Create incident response playbooks, Maintain incident response playbooks, Create operational runbooks, Maintain operational runbooks, Create security documentation, Maintain security documentation, Collaborate with infrastructure teams, Collaborate with engineering teams, Identify vulnerabilities, Implement security hardening, Contribute to disaster recovery planning, Contribute to resilience testing, Provide on-call security support", "teamCollaboration" : "Infrastructure teams; Engineering teams", "domainKnowledge" : "Linux systems; Networking fundamentals; IAM; Common attack techniques; Cloud environments; Containerized systems; MITRE ATT&CK; CIS Controls", "domainList" : [ "linux-systems", "networking-fundamentals", "iam", "common-attack-techniques", "cloud-environments", "containerized-systems", "mitre-att-ck", "cis-controls" ], "domainSpecificKnowledge" : [ "Linux systems", "Networking fundamentals", "IAM", "Common attack techniques", "Cloud environments", "Containerized systems", "MITRE ATT&CK", "CIS Controls" ], "toolProficiency" : [ "SIEM platforms", "Log aggregation systems", "Vulnerability management tools", "Alerting pipelines" ], "communicationSkills" : "Explain technical risks; Explain incidents", "documentationSkills" : "Runbooks; Detection rules; Incident response documentation", "continuousLearning" : "Professional development; Continuous improvement", "problemSolvingSkills" : "Analytical skills; Problem-solving skills", "specialRequirements" : "On-call security support", "qualificationsBasic" : "3–5+ years of experience, Hands-on experience with security monitoring, Hands-on experience with alert triage, Hands-on experience with incident investigation, Hands-on experience with response workflows, Understanding of Linux systems, Understanding of networking fundamentals, Understanding of IAM, Understanding of common attack techniques, Experience with SIEM tools, Experience with log aggregation platforms, Experience with detection engineering processes, Familiarity with cloud environments, Familiarity with containerized systems, Ability to write runbooks, Ability to maintain runbooks, Ability to write detection rules, Ability to maintain detection rules, Ability to write incident response documentation, Ability to maintain incident response documentation, Working knowledge of security frameworks, Analytical skills, Problem-solving skills, Ability to perform under pressure", "qualificationsPreferred" : "Security+ certification, CEH certification, Cloud security credentials", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Develop, maintain, and improve security monitoring systems, including SIEM rules, alerts, dashboards, and detection workflows across infrastructure, cloud, and identity systems. Participate in incident response activities including triage, investigation, containment, remediation, and post-incident reviews to ensure continuous improvement. Proactively conduct threat hunting and security investigations to identify anomalous behavior and emerging risks within systems and services. Operate and enhance security tooling such as SIEM platforms, log aggregation systems, vulnerability management tools, and alerting pipelines. Create and maintain incident response playbooks, operational runbooks, and security documentation to standardize response procedures across teams. Collaborate with infrastructure and engineering teams to identify vulnerabilities and implement security hardening across Linux, cloud, container, and network environments. Contribute to disaster recovery planning, resilience testing, and on-call security support as part of operational readiness. Requirements: 3–5+ years of experience in SecOps, incident response, infrastructure security, or related operational security roles. Hands-on experience with security monitoring, alert triage, incident investigation, and response workflows in production environments. Strong understanding of Linux systems, networking fundamentals, IAM, and common attack techniques. Experience working with SIEM tools, log aggregation platforms, and detection engineering processes. Familiarity with cloud environments (AWS, Azure, or GCP) and containerized systems such as Docker and Kubernetes (or OpenShift/OKD). Ability to write and maintain runbooks, detection rules, and incident response documentation. Working knowledge of security frameworks such as MITRE ATT&CK or CIS Controls. Strong analytical and problem-solving skills with the ability to perform under pressure during security incidents. Excellent communication skills to clearly explain technical risks and incidents to both technical and non-technical stakeholders. Certifications such as Security+, CEH, or cloud security credentials are considered an asset. Benefits: Competitive salary package of approximately €50,000 – €75,000 annually. Fully remote work arrangement with preference for candidates based in Canada or the European Union. Opportunity to work on globally used open source infrastructure with high-impact security responsibilities. Exposure to large-scale distributed systems, cloud environments, and modern security tooling. Collaborative and mission-driven engineering culture focused on innovation and operational excellence. Strong emphasis on learning, professional development, and continuous improvement. Inclusive and flexible work environment supporting remote collaboration across global teams. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Intermediate SecOps Engineer. Skills: Security monitoring, Incident response, Threat hunting, Security tooling. Develop security monitoring systems. Maintain security monitoring systems", "postedDate" : "2026-06-11T13:08:07.361", "createdAt" : "2026-06-11T13:08:07.361", "lastUpdated" : "2026-06-16T00:42:07.867", "ingestTimestamp" : "2026-06-14T21:10:23.426", "mongoId" : "6a2cb20c74d8ee00a09df54e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Security monitoring", "Alert triage", "Vulnerability management", "Log aggregation", "IAM", "Analytical", "Problem-solving", "Incident response", "Threat hunting", "Security tooling", "Detection engineering", "Linux systems", "Networking fundamentals", "Common attack techniques", "Cloud environments", "Containerized systems", "MITRE ATT&CK", "CIS Controls", "Security+", "CEH", "Cloud security credentials", "SIEM platforms", "Log aggregation systems", "Vulnerability management tools", "Alerting pipelines" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 660.80743, "daysOld" : 4, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30a2adf292fd229c11e90d", "title" : "Automation Engineer", "company" : "HelloFresh", "industry" : "Manufacturing", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Automation Engineer in Derby, UK, adjusted for Lead seniority and the Food & Beverage industry." }, "location" : "Derby, England, United Kingdom", "locations" : [ "Derby", "England", "United Kingdom" ], "timestamp" : "2026-06-16T12:54:23.620", "fingerprint" : "ffa44e9176164f43085ca7e600c4d88935d7f51295eef4de19148587d17d01e1", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.hellofresh.com/global/en/job/7846756?gh_jid=7846756", "externalId" : "7846756", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Derby", "state" : "England", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.9142235,-1.4719885" } ], "locationText" : "Derby, England, United Kingdom", "technicalSkills" : "PLCs, HMIs, VFDs, Automation, Controls, Robotics", "professionalSkills" : [ "Root cause analysis", "Continuous Improvement", "Process monitoring", "Flow analysis", "Capacity visualization" ], "hardSkillsList" : [ "PLC programming", "PLC troubleshooting", "PLC repair", "PLC maintenance", "Control systems maintenance", "Robotics maintenance", "Equipment repair", "Preventive maintenance", "Routine inspections", "Root cause analysis", "Commissioning controls systems", "Vendor work audit", "PM modification" ], "softSkillsList" : [ "Confident communicator", "Mentor" ], "hardSkills" : [ { "name" : "PLC programming", "level" : "intermediate" }, { "name" : "PLC troubleshooting", "level" : "intermediate" }, { "name" : "PLC repair", "level" : "intermediate" }, { "name" : "PLC maintenance", "level" : "intermediate" }, { "name" : "Control systems maintenance", "level" : "intermediate" }, { "name" : "Robotics maintenance", "level" : "intermediate" }, { "name" : "Equipment repair", "level" : "intermediate" }, { "name" : "Preventive maintenance", "level" : "intermediate" }, { "name" : "Routine inspections", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Commissioning controls systems", "level" : "intermediate" }, { "name" : "Vendor work audit", "level" : "intermediate" }, { "name" : "PM modification", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Confident communicator" }, { "name" : "Mentor" } ], "majorSkills" : "Automation, Controls, Robotics, Maintenance Engineering", "majorSkillsList" : [ "Automation", "Controls", "Robotics", "Maintenance Engineering" ], "coreResponsibilities" : "Monitor systems, Fault find systems, Repair systems, Perform preventive maintenance, Perform routine inspections, Troubleshoot out of service equipment, Correct equipment issues, Escalate to leadership, Escalate to vendors, Document all work, Mentor maintenance personnel, Develop maintenance personnel knowledge, Partner with engineering on commissioning, Audit vendor work, Provide feedback on quality, Write PMs, Modify PMs", "teamCollaboration" : "Facilities teams; Maintenance teams; Colleagues; Engineering; Vendors", "projectManagementSkills" : [ "CI initiatives" ], "domainKnowledge" : "Controls systems; Maintenance engineering; Sensors; PLCs; Communication protocols; Automation; Robotics; Material handling systems; FMCG production", "domainList" : [ "controls-systems", "maintenance-engineering", "sensors", "plcs", "communication-protocols", "automation", "robotics", "material-handling-systems", "fmcg-production" ], "domainSpecificKnowledge" : [ "Controls systems", "Maintenance engineering", "Sensors", "PLCs", "Communication protocols", "Automation", "Robotics", "Material handling systems", "FMCG production" ], "toolProficiency" : [ "CMMS", "Ticketing systems" ], "communicationSkills" : "Technical manuals; Engineering drawings; Schematics", "documentationSkills" : "Document work", "problemSolvingSkills" : "Troubleshooting; Root cause analysis", "specialRequirements" : "Rotating days and nights, Health and safety compliance, DBS checks", "outcomesObjectives" : "Provide high level of equipment availability; Improve reliability of systems", "qualificationsBasic" : "Solid practical understanding in Mechatronics, Electrical & Electronic, Mechanical, or Manufacturing Engineering, Experienced in Automation, Mechanical, or Maintenance Engineering, Proficient in PLC-controlled systems, Comfortable interpreting technical manuals, engineering drawings, and schematics, Skilled in reactive and preventative maintenance, Adept in material handling systems, Experienced in leading Root Cause Analysis, Independent right to work in the UK", "qualificationsPreferred" : "Experience in a manufacturing or production environment such as FMCG, Exposure to flow analysis, capacity visualization, and process monitoring, Familiar with DIQ and WMS systems, Coaching junior engineers, Stepping in as proxy for senior automation engineers", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Job Title: Automation Engineer Location: Smart parc, Spondon, Derby DE21 7HW Shift: Suez Shift Pattern rotating days and nights, 0600-1800 and 1800-0600. Let's Discuss What's On The Table For You: 70% off HelloFresh or Green Chef boxes Free onsite parking (including ~90 EV spaces) Gym membership Bupa private medical insurance (including dental & family cover options) Nursery support scheme (save up to 40% on your nursery fees) Earn up to £500 with our Referral Program Electric vehicle scheme Cycle to work scheme Group Life Assurance Company pension scheme Mental health first aiders and an employee assistance programme Play a key part in supporting our Employee Resource Groups: FreshVets, Black Heritage Network, NEU Network (Neurodiversity), GET (Gender Equality Team) and FreshPride About The Team: As an Automation Engineer you will be the site Subject Matter Expert (SME) within the team, for all controls systems, maintenance engineering, sensors, PLCs, communication protocols, and automation for the site. You will work with the facilities and maintenance teams and colleagues to maintain and repair conveyance, automation and facilities equipment to support operations uptime and improve reliability of our systems. What You Will Be Doing: Work in a hands-on manner to actively monitor, fault find and repair systems in order to provide a high level of equipment availability to internal customers. Perform preventive maintenance and routine inspections on assigned automation, robotics and control panels. Perform troubleshooting of assigned out of service equipment and correct issues, act as an escalation point for lower level technicians, and escalate to leadership and/or vendors as needed for additional troubleshooting. Document all work in the computerized maintenance management system (CMMS) and ticketing systems as appropriate. Mentor all maintenance personnel in developing appropriate skill sets and knowledge of equipment specializing in automation, controls and robotics. Lead root cause analysis of major downtime events. Act as a network resource for technical issues and lead network-wide root cause analysis. Develop maintenance personnel knowledge on intermediate to advanced automation, controls and robotics. Partner with engineering on commissioning of new controls systems. Audit vendor work to provide feedback to leadership on quality of work and SLA performance. Write and/or modify PMs to standardize across the network and increase effectiveness. Who You Are: Qualified or Solid practical understanding in Mechatronics, Electrical & Electronic, Mechanical, or Manufacturing Engineering Experienced in Automation, Mechanical, or Maintenance Engineering, ideally within a manufacturing or production environment such as FMCG. Proficient in PLC-controlled systems and automated processes, including programming, troubleshooting, repair, and maintenance of PLCs, HMIs, VFDs, and related control systems. Comfortable interpreting technical manuals, engineering drawings, and schematics to support diagnostics and solutions. Skilled in both reactive and preventative maintenance, with a track record of handling second-line escalations and completing CMMS (Computerized Maintenance Management System) tasks. Adept in material handling systems, with exposure to flow analysis, capacity visualization, and process monitoring. A confident communicator and mentor, capable of coaching junior engineers and stepping in as proxy for senior automation engineers when required. Experienced in leading Root Cause Analysis, supporting CI (Continuous Improvement) initiatives, and familiar with DIQ and WMS systems. To be considered for this role, you’ll need to have the independent right to work in the UK, as we're unfortunately unable to provide sponsorship at this time. Next steps: Your application will be reviewed and if successful, a member of the Talent Acquisition Team will be in touch within 2 weeks. You are required to cooperate with HelloFresh in all health and safety matters. You are responsible for ensuring you take reasonable care of your own health, and safety as well as others who may be affected by the work activities you undertake. You must report incidents immediately and actively raise health and safety-related concerns to your Line Manager. As part of our commitment to maintaining a safe and secure environment, we will process Disclosure and Barring Service (DBS) checks to the successful individual. Failure to disclose relevant information at application or throughout the process could affect your employment with the company. If you are currently a HelloFresh employee, please make sure you have discussed your application with your Line Manager.", "summaryDescription" : "Automation Engineer at HelloFresh. Skills: Automation, Controls, Robotics, Maintenance Engineering. Monitor systems. Fault find systems", "postedDate" : "2026-06-16T03:17:14.250", "createdAt" : "2026-06-16T03:17:14.250", "lastUpdated" : "2026-06-16T12:54:23.620", "ingestTimestamp" : "2026-06-16T03:17:14.250", "mongoId" : "6a30a2adf292fd229c11e90d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "PLC programming", "PLC troubleshooting", "PLC repair", "PLC maintenance", "Control systems maintenance", "Robotics maintenance", "Equipment repair", "Preventive maintenance", "Routine inspections", "Root cause analysis", "Commissioning controls systems", "Vendor work audit", "PM modification", "Confident communicator", "Mentor", "Automation", "Controls", "Robotics", "Maintenance Engineering", "Continuous Improvement", "Process monitoring", "Flow analysis", "Capacity visualization", "CI initiatives", "Controls systems", "Maintenance engineering", "Sensors", "PLCs", "Communication protocols", "Material handling systems", "FMCG production", "CMMS", "Ticketing systems" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.7777778, "_score" : 659.50555, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Food & Beverage", "llmIndustryConfidence" : 0.95 }, { "id" : "68c2e42cf8b1b0376634c703", "title" : "Senior Software Development Engineer - Security Automation, AWS Security OpRes", "company" : "Amazon Data Services France SAS", "industry" : "Software Development, amazon security", "salary" : { "min" : 115000.0, "max" : 165000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Lead Senior Software Development Engineer in Technology in Courbevoie, France, adjusted for seniority and company size." }, "location" : "Courbevoie, Ile-de-France, FRA", "locations" : [ "Courbevoie, Ile-de-France, FRA" ], "timestamp" : "2026-06-15T03:52:44.346", "fingerprint" : "72cc89a7a1e7db0de044bb5f8001fd3e99e407471994ce3e6057aee11800392e", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3076283/apply", "externalId" : "308f3aab-34ee-4870-a409-650861e2ce40", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Courbevoie", "state" : "Ile-de-France", "country" : "France", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "48.8953328,2.2561602" } ], "locationText" : "Courbevoie, Ile-de-France, France", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Python, TypeScript, Java, SQL, NoSQL", "professionalSkills" : [ "System design", "Software development practices" ], "hardSkillsList" : [ "Software development", "System architecture", "Data engineering" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System architecture", "level" : "intermediate" }, { "name" : "Data engineering", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security automation, Cloud security, Incident response", "majorSkillsList" : [ "Security automation", "Cloud security", "Incident response" ], "coreResponsibilities" : "Build security incident response platforms, Scale security incident response platforms, Develop advanced capabilities, Streamline incident response workflows, Undertake innovation projects, Analyze data, Prototype disruptive solutions, Build innovative platforms, Fortify Amazon's security, Craft software applications, Mentor junior developers, Lead technical projects, Design sophisticated systems, Implement sophisticated systems", "teamCollaboration" : "Cross-functional teams; Security Engineers; Software Development Engineers", "domainKnowledge" : "Cloud provider; Security operations; Incident response", "domainList" : [ "cloud-provider", "security-operations", "incident-response" ], "domainSpecificKnowledge" : [ "Cloud provider", "Security operations", "Incident response" ], "continuousLearning" : "Knowledge sharing; Training resources; Career-advancing resources", "innovationCreativity" : "Innovation projects; Prototyping; Disruptive solutions", "problemSolvingSkills" : "Complex issues; Complex business problems", "qualificationsBasic" : "Bachelor's degree in Computer Science or equivalent, Experience in professional software development, Experience in designing or architecting systems, Programming experience with Java, Python, or TypeScript, Experience as a tech lead or leading engineering team, EU member state national", "qualificationsPreferred" : "Experience with full software development life cycle, Experience in prototyping new systems, Experience developing using SQL and NoSQL databases, Experience in Cloud Technologies, Security experience a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Security customers demand the highest quality and reliability for their services. We continuously strive to simplify and scale security operations while resolving complex issues. We are looking for highly motivated Software Developers to help build and scale security incident response platforms and tooling across the largest cloud provider in the world. Amazon Security OpRes is a team of Security Engineers and Software Development Engineers dedicated to enhancing security incident response through automation and innovation. Our mission involves optimizing existing processes while pioneering new solutions. We maintain and improve production services, developing advanced capabilities to streamline incident response workflows. Simultaneously, we undertake long-term innovation projects, working backwards from customer needs, analyzing data, and prototyping disruptive solutions with leadership oversight. Leveraging modern technologies and Amazon's robust services, we empower our security response teams with productivity-boosting tools. At a massive scale, we build innovative platforms that fortify Amazon's security. Through continuous improvement and customer-centric innovation, we redefine the boundaries of security automation, ensuring a resilient and secure future for all. You are a Senior Software Engineer who thrives on delivering innovative solutions that solve complex business problems and delight customers with efficiency and productivity gains. Your passion lies in building scalable, high-quality software that drives real impact. As a senior member of our team, you will not only craft robust, efficient, and user-friendly applications but also mentor junior developers and lead technical projects. While experience in security is a plus, it's not required. What truly matters is your ability to design and implement sophisticated systems, leveraging your strong background in modern software development practices, technologies such as AWS services, Python, TypeScript, and data engineering tools. Join our team and contribute to platforms that fortify Amazon's security posture and safeguard our customers' environments, while guiding and inspiring the next generation of developers. Location is Paris, France. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - Bachelor’s degree in Computer Science, related field, or equivalent work experience. - Experience (non-internship) in professional software development. - Extensive experience in designing or architecting (design patterns, reliability and scaling) of new and existing systems. - Programming experience with at least one software programming language- Java, Python, or TypeScript. - Experience as a tech lead OR leading an engineering team. - This role requires you to be a national of an EU member state. Preferred Qualifications: - Experience with full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations. - Experience in prototyping quickly new systems and solutions - Experience developing using SQL and NoSQL databases. - Experience in Cloud Technologies. Amazon est un employeur engagé pour l'égalité des chances. Nous sommes convaincus qu'une main d'oeuvre diversifée est essentielle à notre réussite. Nous prenons nos décisions de recrutement en fonction de votre expérience et de vos compétences. Nous apprécions votre envie de découvrir, d'inventer, de simplifier et de construire. La protection de votre vie privée et la sécurité de vos données constituent depuis longtemps une priorité absolue pour Amazon. Veuillez consulter notre Politique de Confidentialité pour en savoir plus sur la façon dont nous collectons, utilisons et traitons les données personnelles de nos candidats. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Senior Software Development Engineer - Security Automation, AWS Security OpRes at Amazon Data Services France SAS. Skills: Security automation, Cloud security, Incident response. Build security incident response platforms. Scale security incident response platforms", "postedDate" : "2026-06-13T08:28:58.673", "createdAt" : "2026-06-13T08:28:58.673", "lastUpdated" : "2026-06-15T03:52:44.346", "ingestTimestamp" : "2026-06-13T08:28:58.673", "mongoId" : "68c2e42cf8b1b0376634c703", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3076283/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Software development", "System architecture", "Data engineering", "Mentoring", "Security automation", "Cloud security", "Incident response", "System design", "Software development practices", "Cloud provider", "Security operations" ], "skillCount" : 11, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 657.5324, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c5dc974d8ee00a08de8c0", "title" : "Incident Detection/Response Manager (SOC Manager)", "company" : "SkyePoint Decisions", "industry" : "Cybersecurity", "salary" : { "min" : 100000.0, "max" : 120000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "GCIH", "GCFA", "GREM" ], "timestamp" : "2026-06-14T18:54:22.893", "fingerprint" : "a26d854864141b72fd7fdda9b87bab40979eb929aca80323e4f63e8519d0c0a6", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/skyepointdecisionsinc/jobs/4240175009", "externalId" : "4240175009", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "CONTRACT", "minimumEducation" : "Bachelor's", "experienceMinYears" : 8, "experienceLevel" : "Manager", "technicalSkills" : "SIEM, SOAR, EDR, CDM, Malware analysis, AWS native services", "professionalSkills" : [ "Incident response", "Cybersecurity architecture", "Critical infrastructure", "Applications development", "Enterprise-wide solutions", "Mission awareness" ], "hardSkillsList" : [ "Operating systems", "Networking", "Malware analysis" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Operating systems", "level" : "intermediate" }, { "name" : "Networking", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident detection, Incident response, SOC management", "majorSkillsList" : [ "Incident detection", "Incident response", "SOC management" ], "coreResponsibilities" : "Manage SOC daily activities, Build schedules, Update documentation, Manage incident response operations, Coordinate containment activities, Coordinate eradication activities, Coordinate recovery activities, Lead post-incident reviews, Lead root cause analysis, Ensure compliance with NIST SP 800-61, Ensure compliance with FSA incident response SOPs, Manage SIEM event dashboards, Maintain coverage schedule, Maintain call tree", "teamCollaboration" : "Partner organizations; CSPs", "projectManagementSkills" : [ "SOPs", "Playbooks", "CONOPS" ], "domainKnowledge" : "Cybersecurity; NIST SP 800-61; Incident response", "domainList" : [ "cybersecurity", "nist-sp-800-61", "incident-response" ], "domainSpecificKnowledge" : [ "Cybersecurity", "NIST SP 800-61", "Incident response" ], "toolProficiency" : [ "SIEM", "SOAR", "EDR", "CDM" ], "communicationSkills" : "Documentation", "documentationSkills" : "SOPs; Playbooks; CONOPS", "continuousLearning" : "Certification incentive program", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Secret clearance, U. S. Citizen", "qualificationsBasic" : "Bachelor's degree, 8+ years IT experience, 4+ years incident response, Active Secret clearance, U. S. Citizen", "qualificationsPreferred" : "GCIH certification, GCFA certification, GREM certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U. S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon contract win. SkyePoint Decisions is seeking a Incident Detection/Response Manager (SOC Manager) to join our team supporting the Department of Education’s (DoED) Federal Student Aid (FSA) Cybersecurity and Privacy Support Services (CPSS) in Washington, DC. This is a remote position. Responsibilities: Manages SOC daily activities including building schedules and making sure all documentation such as but not limited to SOPs, Playbooks, CONOPS are up to date. Manages Tiers I/II/III incident response operations. Coordinates containment, eradication, and recovery activities. Leads post-incident reviews and root cause analysis. Ensures compliance with NIST SP 800-61 and FSA incident response SOPs. Manages SIEM event “notables” dashboards. Maintains coverage schedule per shift. Maintains call tree including contact information for all partner organizations and CSPs. Required Qualifications: Bachelor's degree and 8+ years of IT experience with 4+ years in incident response. Must have at least an active Secret clearance. At least one of these certifications: GCIH, GCFA, GREM, among others. Experience with SIEM, SOAR, EDR, CDM, and malware analysis. Experience with operating systems and networking. Experience with AWS native services and tools. Experience managing SOC overseeing complex systems. Must be a U. S. Citizen. Compensation: Salary Range: $100,000-$120,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I. G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U. S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here", "summaryDescription" : "Incident Detection/Response Manager (SOC Manager) at SkyePoint Decisions. Skills: Incident detection, Incident response, SOC management. Manage SOC daily activities. Build schedules", "postedDate" : "2026-06-12T21:38:51.252", "createdAt" : "2026-06-12T21:38:51.252", "lastUpdated" : "2026-06-14T18:54:22.893", "ingestTimestamp" : "2026-06-12T21:38:51.252", "mongoId" : "6a2c5dc974d8ee00a08de8c0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 100000, "salaryAnnualMax" : 120000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Operating systems", "Networking", "Malware analysis", "Leadership", "Incident detection", "Incident response", "SOC management", "Cybersecurity architecture", "Critical infrastructure", "Applications development", "Enterprise-wide solutions", "Mission awareness", "SOPs", "Playbooks", "CONOPS", "Cybersecurity", "NIST SP 800-61", "GCIH", "GCFA", "GREM", "SIEM", "SOAR", "EDR", "CDM" ], "skillCount" : 24, "jobCategory" : "other", "jobSubcategory" : "billable-", "dataQualityScore" : 1.0, "_score" : 645.8009, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity" }, { "id" : "6a2c751574d8ee00a09360f7", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T03:29:01.550", "fingerprint" : "a9b58b622fae2a5e015d888ceb1430e0f4c7af9bae19294b10f2e0362b229c6e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, Data lakes, EDR, Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management" ], "hardSkillsList" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident investigation", "level" : "intermediate" }, { "name" : "Incident containment", "level" : "intermediate" }, { "name" : "Incident remediation", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Response planning", "level" : "intermediate" }, { "name" : "On-call management", "level" : "intermediate" }, { "name" : "Escalation paths", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Telemetry analysis", "level" : "intermediate" }, { "name" : "Adversary tradecraft", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire for functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Ensure critical telemetry is available, Ensure critical telemetry is reliable, Ensure critical telemetry is actionable, Embed detection and response by design, Build a security program, Use Serval's agents for security problems, Use Serval's agents for security-operations problems", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure; Work with stakeholders", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments; AI-native automation", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments", "ai-native-automation" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "communicationSkills" : "Written communication; Verbal communication; Incident communication", "innovationCreativity" : "Solve frontier security problems; Solve frontier security-operations problems", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Scale detection and response operations; Improve response quality; Improve response speed", "qualificationsBasic" : "10+ years in cybersecurity, Deep expertise in detection engineering, Deep expertise in incident response, Deep expertise in security operations, Deep experience building detection and response teams, Deep experience building instrumentation/observability teams, Deep experience building threat intelligence teams, Stellar leadership skills, Demonstrated history of driving improvements, Exceptional written communication skills, Exceptional verbal communication skills, Remain calm under pressure, Effectively run command of security incidents, Deep expertise in modern observability stacks, Deep expertise in SIEM, Deep expertise in data lakes, Deep expertise in EDR, Deep expertise in cloud telemetry, Deep expertise in logging, Deep expertise in detection primitives, Understand modern adversary tradecraft (TTPs), Demonstrated experience translating TTPs into detection strategies, Demonstrated experience translating TTPs into response actions, Mission-oriented, Unimpeachable integrity, Passionate about detecting and responding to adversaries", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T19:27:55.217", "lastUpdated" : "2026-06-16T03:29:01.550", "ingestTimestamp" : "2026-06-14T19:27:55.217", "mongoId" : "6a2c751574d8ee00a09360f7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 642.25116, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c916274d8ee00a0982ab5", "title" : "Senior QA Automation Engineer", "company" : "Mangopay", "salary" : { "min" : 15000.0, "max" : 18000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : false }, "location" : "Mangopay", "locations" : [ "Mangopay" ], "timestamp" : "2026-06-16T00:56:57.790", "fingerprint" : "16ca51caed5d2e7c60d75e0919782503cde4b32326c76a9ba266f9b9e99937cb", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/mangopay/jobs/4864828101", "externalId" : "4864828101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Madrid", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "40.4167820,-3.7035070" }, { "city" : "Paris", "country" : "France", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "48.8534951,2.3483915" }, { "city" : "Warsaw", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" }, { "city" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.5173885,13.3951309" }, { "city" : "Luxembourg", "country" : "Luxembourg", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "49.6112768,6.1297990" }, { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "Madrid, Spain; Paris, France; Warsaw, Poland; Berlin, Germany; Luxembourg, Luxembourg; London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Mangopay is a wallet-based payment infrastructure built specifically for organisations with complex, multi-party fund flows. A pioneer in multi-party payments. Our solution optimises fund flows on behalf of the organisations we work with using wallets as programmable, composable building blocks. Mangopay’s regulated platform collects payments, secures transactions and holds funds, splits money between the various parties in the funds flow, and ultimately manages the payout to service providers, sellers, and consumers. Platforms and fintechs using Mangopay regain control and transparency over multi-party payment flows, generate additional revenue, and improve operational efficiency. They can stay compliant while innovating and scaling. Our team of 300+ people is spread across offices in Madrid, Paris, Warsaw, Berlin, Luxembourg and London. We're looking for talented individuals to join us in tackling the exciting challenges ahead. At Mangopay, you’ll be part of a supportive, diverse team committed to building scalable solutions and driving change in the fintech space! Job Description To support the strong growth of our business and the scaling up of our modular payments platform, MANGOPAY is expanding and looking for a Senior QA Automation Engineer. As a member of one of our squads, you will be responsible for representing QA. You will collaborate closely with Product and Development representatives. You will serve as the quality advocate within your squad. Our different squads work on various functional areas of our platform through technical or product initiatives that make up our roadmap. Your role will be to contribute to your squad’s roadmap while considering QA needs and objectives. This includes improving and facilitating deliverables and providing a clear picture of the product’s quality. What will you be responsible for? Ensuring clarity of the quality of a release as well as the follow-up of identified problems Leading the implementation and maintenance of automated functional and non-functional testing (involves APIs) Research and identification of new automation solutions, tools, and processes to improve the existing ones Sharing best practices with the PM/DEV team by taking a cross-functional view of QA Ensuring the follow-up of production releases as well as events that may occur Ensuring the implementation and monitoring of performance KPIs for production Technical stack : Playwright, K6, Postman Datadog, Elasticsearch (Kibana, Elastalert), Grafana Git (Gitlab), TeamCity, Octopus Deploy Jira, XRay for Jira What do we expect from you? 5 years of experience as an Automation QA Engineer Experience in API testing Extensive knowledge of TS/JS Experience using test frameworks such as Playwright (mandatory at least 3 years), k6 (would be a plus), Cypress would be optional Experience with C# would be ideal Agile QA mindset: working in an Agile context is important to you Strong knowledge of testing best practices: familiar with the ‘Test Pyramid’ and ‘Test Quadrants’ Experience with reporting and monitoring aspects Excellent analytical skills, autonomy, and attention to detail English is mandatory for this role Our budget for this role: Standard contract: 15.000PLN /18.000 PLN gross monthly B2B: 16.000 PLN / 18.000 PLN netto + VAT monthly + 30 paid days non service We care about equal employment opportunities, so all qualified applicants will receive equal consideration regardless of their race, colour, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.", "summaryDescription" : "Senior QA Automation Engineer at Mangopay", "postedDate" : "2026-06-14T20:11:49.837", "createdAt" : "2026-06-14T20:11:49.837", "lastUpdated" : "2026-06-16T00:56:57.790", "ingestTimestamp" : "2026-06-14T20:11:49.837", "mongoId" : "6a2c916274d8ee00a0982ab5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 640.721, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a3050c7f292fd229cef5269", "title" : "Automation Engineer", "company" : "Tesco Controls", "industry" : "SCADA", "salary" : { "min" : 44.23, "max" : 64.9, "currency" : "USD", "frequency" : "per-hour-wage" }, "location" : "Temecula, CA", "locations" : [ "Temecula, CA" ], "timestamp" : "2026-06-16T12:06:57.682", "fingerprint" : "ea2399d834e12260a432620b19d3c4d5515766b20a3de24979a74f12dda4a12a", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/uft/8abe64c6-55eb-404b-be03-2be94d041ff8/apply", "externalId" : "8abe64c6-55eb-404b-be03-2be94d041ff8", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Temecula", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "33.4946353,-117.1473660" } ], "locationText" : "Temecula, California, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "Python, C++, Java, Linux, Windows, SQL, NoSQL, AWS, Azure, GCP, Docker, Kubernetes, CI/CD, Git, Jenkins, Ansible, Terraform, Machine Learning, Deep Learning, Data analysis, Data visualization, REST APIs, GraphQL", "professionalSkills" : [ "System design", "Algorithm design", "Data structures", "Software architecture", "Agile methodologies", "DevOps practices", "Cloud computing", "Automation" ], "hardSkillsList" : [ "Performance tuning", "Scalability", "Reliability", "Security best practices" ], "hardSkills" : [ { "name" : "Performance tuning", "level" : "intermediate" }, { "name" : "Scalability", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Security best practices", "level" : "intermediate" } ], "majorSkills" : "Automation, System design, Cloud infrastructure", "majorSkillsList" : [ "Automation", "System design", "Cloud infrastructure" ], "coreResponsibilities" : "Design and implement automation solutions, Develop and maintain CI/CD pipelines, Build and manage cloud infrastructure, Write clean, maintainable code, Troubleshoot and resolve system issues, Collaborate with cross-functional teams, Mentor junior engineers, Stay up-to-date with new technologies", "teamCollaboration" : "Cross-functional teams; Agile development teams; Engineering teams", "projectManagementSkills" : [ "Agile", "Scrum" ], "domainKnowledge" : "Distributed systems; Cloud-native architecture; Microservices; Containerization; Infrastructure as Code", "domainList" : [ "distributed-systems", "cloud-native-architecture", "microservices", "containerization", "infrastructure-as-code" ], "domainSpecificKnowledge" : [ "Distributed systems", "Cloud-native architecture", "Microservices", "Containerization", "Infrastructure as Code" ], "toolProficiency" : [ "Git", "Jenkins", "Ansible", "Terraform", "Docker", "Kubernetes", "JIRA" ], "communicationSkills" : "Technical documentation; Presentations", "documentationSkills" : "Technical writing; Architecture diagrams", "continuousLearning" : "Professional development; Conferences; Training", "innovationCreativity" : "Research new technologies; Prototype development", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Analytical thinking", "outcomesObjectives" : "Improve system reliability; Increase deployment frequency; Reduce operational costs", "qualificationsBasic" : "5+ years experience, Bachelor's degree", "qualificationsPreferred" : "Master's degree, PhD", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## Description At Tesco Controls (a UFT company), our culture is grounded in the idea that the how we achieve results is just as important as the results themselves. Our winning behaviors guide the way we work, collaborate, and grow—both as individual employees and as a team. Our core winning behaviors are to Build Relationships, have a Relentless Drive for Results, to Communicate with Integrity and Focus, and to Be a Mentor, Teacher, Learner. These behaviors are more than words—they are the foundation of our success and continued growth. Here, you’ll join a stable, growing company where your work directly supports cleaner water, stronger communities, and critical infrastructure across the country. If you want meaningful work, real growth opportunities, and a team that takes pride in doing the right thing—you’ll find it here. Apply today and help power the systems that keep our world running. Tesco Controls is seeking an Automation Engineer to support the development and implementation of control systems for water and wastewater treatment processes. This role involves designing and programming PLC, OIT, and SCADA applications based on engineering drawings and specifications, ensuring accurate and efficient system functionality. The position includes responsibilities for bench and panel testing to validate performance against project requirements, as well as assisting with on-site startup and troubleshooting. This is an excellent opportunity to apply technical expertise in a hands-on, collaborative environment while contributing to critical infrastructure projects. ## What you will do Write PLC and SCADA operating programs based upon control specification and/or Tesco standards to assure safe, reliable and optimal equipment operation Write (publish) concise operating instructions detailing; control parameters and their effects under normal and failure conditions Provide technical assistance (phone or job-site) to verify and/or modify PLC/SCADA programs Work with various departments internally, along with consulting engineers, customers and end-users to assure proper programming for the system layouts and designs Analyze and interpret existing programs and documentation for project modifications Ensure assignments and work schedules follow policy and procedures Communicate effectively to a wide range of internal and external contacts Support multiple smaller scaled projects Provide weekly content and job status reports used with scheduling tools Execute successful unassisted start-ups of complex sites Demonstrates ability to perform technical leadership role on projects Assigned to perform quality checks for projects engineered by peers Ability to conduct customer facing workshops and trainings All other duties assigned ## Demonstrated Skills Excellent verbal and written communication skills Excellent attention to detail High level of organizational and time management skills Familiarity with industrial automation programming best practices ## Education & Knowledge Bachelor’s degree in Computer Programming, Computer Science, Computer Technology, Engineering, related field Basic knowledge of ladder logic and structured text programming Basic knowledge of programming languages such as C, C++, Java Basic understanding of computer operations, Microsoft Office Working knowledge of instruments and electro-mechanical devices used for process control ## Experience Preferred 2 years of experience ## Required Daily travel ## Additional Information Join our team to innovate the future of water and wastewater. You’ll collaborate with coworkers who are the best and the brightest, challenge yourself on exciting work, and help build the best water and wastewater platform company in the U.S. Tesco Controls is an Equal Employment Opportunity Employer. TESCO provides equal employment opportunities to all qualified applicants without regard to race, sex, sexual orientation, gender identity, national origin, color, age, religion, protected veteran or disability status, or genetic information. (Compliant with the new VEVRAA and Section 503 rules) . ", "summaryDescription" : "Automation Engineer at Tesco Controls. Skills: Automation, System design, Cloud infrastructure. Design and implement automation solutions. Develop and maintain CI/CD pipelines", "postedDate" : "2026-06-15T16:35:13.181", "createdAt" : "2026-06-15T16:35:13.181", "lastUpdated" : "2026-06-16T12:06:57.682", "ingestTimestamp" : "2026-06-16T03:19:58.020", "mongoId" : "6a3050c7f292fd229cef5269", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 64, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Performance tuning", "Scalability", "Reliability", "Security best practices", "Automation", "System design", "Cloud infrastructure", "Algorithm design", "Data structures", "Software architecture", "Agile methodologies", "DevOps practices", "Cloud computing", "Agile", "Scrum", "Distributed systems", "Cloud-native architecture", "Microservices", "Containerization", "Infrastructure as Code", "Git", "Jenkins", "Ansible", "Terraform", "Docker", "Kubernetes", "JIRA" ], "skillCount" : 27, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 0.8888889, "_score" : 640.6842, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c92ed74d8ee00a0986e0d", "title" : "Automation Engineer", "company" : "Xebia", "industry" : "Consulting", "salary" : { "min" : 130000.0, "max" : 185000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Automation Engineer in Poland, adjusted for mid-seniority and the technology industry." }, "location" : "Poland", "locations" : [ "Poland" ], "timestamp" : "2026-06-15T09:54:40.921", "fingerprint" : "5576d683396e07f8bbd773962085b5ff3a1f1945129aee781e69ac543ed489bb", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/xebiacee/jobs/5995396004", "externalId" : "5995396004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Poland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Poland", "technicalSkills" : "Ansible, Python, AWS Lambda, Azure Functions, Google Cloud Functions, Jenkins, GitLab CI, GitHub Actions, Terraform, ServiceNow APIs, Git", "professionalSkills" : [ "ROI-based scoring", "Change management", "Code review", "Reliability standards", "Security standards" ], "hardSkillsList" : [ "Automation engineering", "Infrastructure automation", "CI/CD pipelines", "Cloud automation", "ITSM integration", "Workflow automation", "Version control", "Code review" ], "hardSkills" : [ { "name" : "Automation engineering", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "Cloud automation", "level" : "intermediate" }, { "name" : "ITSM integration", "level" : "intermediate" }, { "name" : "Workflow automation", "level" : "intermediate" }, { "name" : "Version control", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" } ], "majorSkills" : "Automation engineering, DevOps, Cloud automation, CI/CD", "majorSkillsList" : [ "Automation engineering", "DevOps", "Cloud automation", "CI/CD" ], "coreResponsibilities" : "Analyse incident trends, Assess toil, Identify automation candidates, Prioritise automation backlog, Build automation workflows, Develop self-service runbook automations, Integrate automations with ServiceNow, Integrate automations with CI/CD pipelines, Implement governance controls, Approve low-risk automations, Notify for medium-risk changes, Approve high-risk automations, Measure automation outcomes, Report automation outcomes, Collaborate with SRE teams, Collaborate with Platform teams, Maintain automation code, Deliver against automation targets, Support Automation Factory pipeline", "teamCollaboration" : "SRE teams; Platform teams", "projectManagementSkills" : [ "Prioritisation", "Backlog management" ], "domainKnowledge" : "Cloud-native tools; ServiceNow APIs; CI/CD pipelines; Change management; Governance frameworks; SRE practices; Toil elimination; AIOps; ML-driven automation", "domainList" : [ "cloud-native-tools", "servicenow-apis", "ci-cd-pipelines", "change-management", "governance-frameworks", "sre-practices", "toil-elimination", "aiops", "ml-driven-automation" ], "domainSpecificKnowledge" : [ "Cloud-native tools", "ServiceNow APIs", "CI/CD pipelines", "Change management", "Governance frameworks", "SRE practices", "Toil elimination", "AIOps", "ML-driven automation" ], "toolProficiency" : [ "Ansible", "Python", "AWS Lambda", "Azure Functions", "Google Cloud Functions", "Jenkins", "GitLab CI", "GitHub Actions", "Terraform", "ServiceNow", "Git", "Claude Code", "GitHub Copilot", "Cursor" ], "communicationSkills" : "English communication", "continuousLearning" : "Personal development budgets", "innovationCreativity" : "Experimentation", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Decision making", "specialRequirements" : "Work permit required, Work from EU region", "outcomesObjectives" : "Identify automation candidates; Prioritise automation backlog; Deliver automation workflows; Implement governance controls; Measure automation outcomes; Report automation outcomes; Ensure reliability standards; Ensure security standards; Deliver against automation targets", "qualificationsBasic" : "3 - 6 years experience, Automation engineering experience, DevOps experience, Infrastructure automation experience, Practical AI assistant experience, Python programming skills, Ansible programming skills, CI/CD pipeline experience, Cloud automation technologies experience, ITSM platforms integration experience, ServiceNow APIs experience, Workflow automation experience, Change management processes understanding, Governance frameworks understanding, Version control systems proficiency, Git proficiency, Code review best practices, Good English communication skill", "qualificationsPreferred" : "GenAI application experience, Emerging AI-driven practices familiarity, Kubernetes operators experience, Custom controllers experience, ChatOps familiarity, Self-service automation patterns familiarity, SRE practices knowledge, Toil elimination methodologies knowledge, Managed services experience, Large-scale operations experience, AIOps exposure, ML-driven automation prioritisation exposure", "remoteFriendly" : true, "rawDescription" : "Who We Are While Xebia is a global tech company, our journey in CEE started with two Polish companies – PGS Software, known for world-class cloud and software solutions, and GetInData, a pioneer in Big Data. Today, we’re a team of 1,000+ experts delivering top-notch work across cloud, data, and software. And we’re just getting started. What We Do We work on projects that matter – and that make a difference. From fintech and e-commerce to aviation, logistics, media, and fashion, we help our clients build scalable platforms, data and AI solutions, and cutting-edge applications to shape the future of tech. Our clients include McLaren, Aviva, Deloitte, Spotify, Disney, ING, UPS, Tesco, Truecaller, AllSaints, Volotea, Schmitz Cargobull, Allegro, InPost, and many, many more. We value smart tech, real ownership, and continuous growth. We use modern, open-source stacks, and we’re proud to be trusted partners of Databricks, dbt, Snowflake, Azure, GCP, and AWS. Fun fact: we were the first AWS Premier Partner in Poland! Beyond Projects What makes Xebia special? Our community. We support tech communities, organize meetups (Software Talks, Data Tech Talks), and have a culture that actively support your growth via Guilds, Labs, and personal development budgets — for both tech and soft skills. It’s not just a job. It’s a place to grow. What sets us apart? Our mindset. Our vibe. Our people. And while that’s hard to capture in text – come visit us and see for yourself. You will be: analysing incident trends, toil assessments, and recurring patterns to identify automation candidates, prioritising the automation backlog using ROI-based scoring models, considering effort saved, frequency, and risk level, building automation workflows using Ansible, Python, and cloud-native tools such as AWS Lambda, Azure Functions, Google Cloud Functions, developing self-service runbook automations integrated with ServiceNow and CI/CD pipelines, implementing governance controls, including pre-approved low-risk automations, auto-notifications for medium-risk changes, and Change Board approval flows for high-risk automations, measuring and reporting automation outcomes, including tickets avoided, effort saved, and weekly automation releases, collaborating with SRE and Platform teams to ensure automations meet reliability and security standards, maintaining automation code within Git repositories with full IP portability from Day 1, delivering against automation targets, supporting the Automation Factory’s 5-step pipeline: Input, Prioritise, Build, Govern, and Measure. Your profile: 3 - 6 years of experience in automation engineering, DevOps, or infrastructure automation, practical experience using AI-powered assistants (e. g. Claude Code, GitHub Copilot, Cursor) to improve productivity, quality, or decision-making in software delivery, strong programming skills in Python and/or Ansible, experience building CI/CD pipelines using tools such as Jenkins, GitLab CI, or GitHub Actions, familiarity with cloud automation technologies including AWS Lambda, Azure Functions, and Terraform, experience integrating ITSM platforms, particularly ServiceNow APIs and workflow automation, understanding of change management processes and governance frameworks, proficiency with version control systems such as Git and code review best practices, good English communication skill (at least B2 level). Work from the European Union region and a work permit are required. Nice to have: experience applying GenAI in a more structured way within the SDLC, including defined workflows, prompt patterns, or tool integrations embedded into daily work, interest in and familiarity with emerging AI-driven practices (e. g. agent-based workflows, automation patterns, AI-augmented development), with a willingness to explore and experiment beyond standard approaches, experience with Kubernetes operators or custom controllers, familiarity with ChatOps and self-service automation patterns, knowledge of SRE practices and toil elimination methodologies, experience working in managed services or large-scale operations environments, exposure to AIOps and ML-driven automation prioritisation. Recruitment Process: CV review – HR call – Technical Interview – Client Interview – Decision", "summaryDescription" : "Automation Engineer at Xebia. Skills: Automation engineering, DevOps, Cloud automation, CI/CD. Analyse incident trends. Assess toil", "postedDate" : "2026-06-14T09:11:40.169", "createdAt" : "2026-06-14T09:11:40.169", "lastUpdated" : "2026-06-15T09:54:40.921", "ingestTimestamp" : "2026-06-14T09:11:40.169", "mongoId" : "6a2c92ed74d8ee00a0986e0d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Automation engineering", "Infrastructure automation", "CI/CD pipelines", "Cloud automation", "ITSM integration", "Workflow automation", "Version control", "Code review", "DevOps", "CI/CD", "ROI-based scoring", "Change management", "Reliability standards", "Security standards", "Prioritisation", "Backlog management", "Cloud-native tools", "ServiceNow APIs", "Governance frameworks", "SRE practices", "Toil elimination", "AIOps", "ML-driven automation", "Ansible", "Python", "AWS Lambda", "Azure Functions", "Google Cloud Functions", "Jenkins", "GitLab CI", "GitHub Actions", "Terraform", "ServiceNow", "Git", "Claude Code", "GitHub Copilot", "Cursor" ], "skillCount" : 37, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 639.71796, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 124564, "totalPages" : 2492, "hasNext" : true, "hasPrevious" : false } }

8nw Senior Secops Incident Response Automation Engineer Jobs in Mumbai

[8NW] Senior SecOps Incident Response Automation Engineer