Staff Security Engineer, Enterprise Security Operations

📋 Description Own the health and tuning of Aurora's enterprise security stack (EDR/XDR, SIEM, IAM, PKI). Develop and refine detection rules, correlation logic, and alert policies to reduce noise. Conduct proactive threat hunting across telemetry; form hypotheses and query logs. Act as the deepest internal expert on enterprise security tooling; escalation point for issues. Participate in on-call rotation; lead deep-dive investigations into alerts and incidents. Continuously audit security controls to ensure proper configuration and coverage. 🎯 Requirements 12+ years in enterprise security operations or senior SOC with tooling ownership. Expert with at least two enterprise security platforms (e.g., CrowdStrike, Splunk, Okta). Tune and optimize security platforms beyond out-of-the-box, with custom detection logic. Strong log analysis and threat hunting; build hypotheses and escalate when needed. Experience investigating incidents: triage, containment, root cause analysis, post-incident reviews. Assess security control effectiveness; ensure coverage and actionable signal. 🎁 Benefits Hybrid in-office work schedule (min 3 days/week). Annual bonus. Equity compensation. Comprehensive benefits package.