Staff Security Operations Engineer

Build agentic security operations for Workleap and ShareGate, combining detection engineering, incident response, and cloud security expertise across a small team.

As a hands-on Staff individual contributor, you will own how threats are detected, investigated, and answered across Workleap and ShareGate. You will build systems that triage, enrich, correlate, and route findings while defining when agents act independently or require human judgment. Your work spans Azure, cloud-native SIEM and XDR tooling, Jira, and MITRE ATT&CK-mapped detections.

Key Responsibilities:

• Build end-to-end security operations integrations and agentic investigation workflows
• Define agent trust models with evaluations and safeguards
• Reduce false positives and correctly prioritize security findings
• Own detection engineering as code mapped to MITRE ATT&CK
• Lead incident response from triage through postmortems

Requirements:

• Seven-plus years in security operations, incident response, or detection engineering
• Recent hands-on experience in a cloud SaaS environment
• Experience building agent systems with evaluations for trusted outputs
• Fluency in a SIEM query language and measured false-positive rates
• Strong understanding of identity and cloud attack paths

Shape trusted agentic detection, response, and investigation systems across Workleap and ShareGate with measurable security outcomes.