Security Operations, Engineer

• You have solid security operations experience, whether from security engineering, appsec or platform security
• You know GCP properly: IAM, service accounts, logging and org policy. AWS and Azure familiarity helps
• You can read code well enough to judge whether a SAST finding is real
• You’re genuinely fluent with AI tooling and you build with it rather than around it
• You write clearly, because most of what you produce is a decision someone else has to act on
• You’re comfortable saying no with a reason and yes with conditions, and happy owning a function rather than working a queue

Brainlabs is the independent, founder-led agency building the future of media. We have over 1000 Brainlabbers based across the global, all united through the 12 principles laid out in our Culture Code. We’re full-service, with people and AI agents working side by side, all aligned to one thing: maximizing our clients’ revenue through a genuinely scientific approach to media. If you want to help play your part in achieving this for the world’s biggest brands in an environment that will support and challenge you in equal measure, this is where you do it., Brainlabs is culture-first. You’ve probably heard other companies describe themselves as people, clients, or profit first - but we see people, clients and profit as the building blocks of our ecosystem. Culture powers all three and we know that when the ecosystem is balanced, we all win! That’s why the culture we cultivate is a culture of winning together.

To learn more about what it’s like to be a Brainlabber, check out our culture code.

What you do

• Own day-to-day security operations: vulnerability management, connector and MCP approvals, threat model reviews and incident support
• Run and extend our SecOps AI agents, which handle Mend triage, MCP assessment, documentation review and incident scribing
• Make the security decisions the agents escalate, setting clear conditions rather than blanket blocks
• Drive vulnerability remediation with our dev and platform teams, escalating when fixes stall
• Keep security posture visible across GCP projects plus AWS and Azure, and partner with SEP2, our external MDR provider