Lead Security Operations Engineer (worldwide remote, work anywhere)

CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we are all successful. We are truly a great place to work.

Check out our website for more information https://cloudlinux.com/

We are looking for a Lead Security Operations Engineer who will drive the development, implementation, and operational excellence of our detection, incident response, and threat intelligence capabilities. This role requires expertise in analyzing large datasets, building and maintaining Detection & Response infrastructure, and deploying cybersecurity tools at the infrastructure level. You will play a key role in strengthening CloudLinux’s security posture by enhancing visibility, improving response processes, and collaborating across teams to lead critical security initiatives.

As a Lead Security Operations Engineer, you will:

• Incorporate security practices into our infrastructure and automation processes.
• Collaborate with development and operations teams to embed security measures into the entire software development lifecycle.
• Create detection rules to catch attackers. Pursue unusual strategies to try to radically improve our ability to detect attackers and the speed of detection.
• Stay current with security standards/regulations.
• Identify security innovation tools/lead implementation solutions from proof of concept to production.
• Manage/implement cloud security controls - identity, access management, organizational policies. Evolve our tooling/logging/monitoring/alerting systems, increasing observability and transparency.
• Triage, investigate, and escalate security alerts, and provide recommendations for remediation.
• Document procedures and best practices to ensure effective knowledge sharing.
• Configure and operate security scanning tools, collaborating with internal and external engineering teams to optimize alert rules.
• Develop a comprehensive understanding of systems, environments, and tools.