> Markdown version of [/jobs/ext/2713002-security-operations-engineer](https://www.wearedevelopers.com/jobs/ext/2713002-security-operations-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Operations Engineer

- **Company:** PAXOS, LLC
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cloud Computing, Cyber Security, Security Information and Event Management, Cloud Platform System, Performance Monitor
- **Published:** September 4, 2026
- **Apply:** https://startup.jobs/security-operations-engineer-paxos-8744831

## About the Role

* You bring 3+ years of experience in security operations, detection and response, or a related security engineering role.
 * You have experience investigating and responding to security threats across endpoints, cloud environments, and network telemetry.
 * You bring strong analytical judgment and a calm, methodical approach to triaging alerts and driving incidents through resolution.
 * You have hands-on experience with SIEM and EDR platforms, including tuning detections to improve signal quality and reduce false positives.
 * You think like a builder and look for opportunities to automate repetitive work, including using AI to improve speed and scale.
 * You are comfortable applying threat intelligence, including IOCs and TTPs, to investigations and proactive monitoring.
 * You are prepared to participate in an on-call rotation and can document incidents clearly and effectively to support continuous improvement.

## Description

As a Security Operations Engineer, you will serve on the front lines of our security program, helping protect the organization by detecting, investigating, and containing threats across our endpoints, cloud infrastructure, and network. You will act as both an investigator and a builder: triaging and resolving security incidents with precision while continuously improving detections and automations that help the team move faster and operate more effectively. This role is central to our day-to-day security posture, turning alerts into meaningful action., * Triage, investigate, and respond to security alerts across endpoints, cloud infrastructure, and network telemetry.

 * Take a builder's mindset to the role by automating repetitive workflows and using AI to increase speed, scale, and effectiveness.
 * Execute containment and remediation actions for confirmed incidents, while following and continuously improving established runbooks.
 * Tune and maintain SIEM and EDR detections to reduce false positives, strengthen signal quality, and close coverage gaps.
 * Apply threat intelligence, including IOCs and TTPs, to active investigations and ongoing monitoring.
 * Participate in the on-call rotation and contribute clear, actionable post-incident documentation.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Automate everything via NodeJS and Puppeteer](https://www.wearedevelopers.com/videos/322-automate-everything-via-nodejs-and-puppeteer)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)