You will partner closely with Senior Detection & Threat Engineers, Application Security, Information Security, Security Operations, and Engineering executing against the standards they set, feeding operational insight back up, and progressively taking ownership of the tooling and procedures that keep security operations running.
WHAT YOU'LL BE RESPONSIBLE FOR
Supporting and enhancing security tooling SIEM, EDR, DLP, vulnerability management, and automation platforms including configuration, tuning, and day-to-day maintenance
Building and improving operational procedures, runbooks, and playbooks so the team's response is consistent and repeatable
Triaging and handling security alerts, escalating high-severity events, and contributing to incident response under the direction of senior engineers
Tracking, coordinating, and driving pentest and vulnerability findings through to remediation across engineering teams (ownership, action plans, status, closure)
Maintaining the accuracy and hygiene of security data asset inventories, finding trackers, and remediation records
Supporting detection deployment and validation, and feeding operational feedback into detection tuning to reduce noise and alert fatigue
Assisting with scripting and automation to remove manual toil from recurring operational tasks
Producing clear operational reporting and metrics on findings, remediation progress, and tooling health
WHAT WE'RE LOOKING FOR
5+ years of hands-on experience in a Security Operations, SOC, or equivalent operational security role
Practical experience operating modern security tooling SIEM (e.g. Sentinel), Data Loss Prevention (DLP) tools, EDR, and vulnerability management platforms
Solid understanding of security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles
Comfort with scripting to support automation and tooling (e.g. Python, KQL)
Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure
Working knowledge of cloud environments (e.g. AWS, Azure and GCP) and how security operations apply across cloud and SaaS
Familiarity with common frameworks and standards such as PCI DSS, NIST CSF, SOC 2, ISO 27001, CIS Benchmarks, and MITRE ATT&CK
A pragmatic, ownership-minded operator: methodical, detail-oriented, and focused on getting things fixed rather than just logged
Additional Information
Bring all of you to work
We create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.
Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.
We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.
It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.
Life at Checkout.com http://Checkout.com
We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us.
For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/
