Coalfire

Cyber solutions that move you forward, faster.

Principal, SecOps

Security OperationsSecurity OperationsFull TimeRemoteTeam 1,001-5,000Since 2001H1B SponsorCompany SiteLinkedIn

Location

United States

Posted

43 days ago

Salary

$86K - $148K / year

Bachelor Degree7 yrs expExperience acceptedEnglishAnsibleAWSAzureCloudGoogle Cloud PlatformSplunkTerraform

Job Description

• Act as the primary technical escalation point for complex operational issues, ensuring quick and effective resolutions. • Maintain and optimize critical systems, including SIEM platforms (e.g., Splunk, ELK, SumoLogic, Sentinel), Anti-Virus tools (Trend Micro Deep Security Manager, Microsoft Defender, Crowdstrike) and vulnerability management tools (e.g., Nessus, Qualys, Burp). • Monitor and improve the team’s use of automation and monitoring tools to drive operational efficiency. • Analyze and resolve system performance issues, ensuring compliance with security and operational standards. • Participate in incident response and post-mortem analysis to identify root causes and prevent recurrence. • Mentor and support the professional growth of engineers through training, feedback, and career development planning. • Assist with hiring, onboarding, and retention to ensure team stability and growth. • Oversee day-to-day delivery of security services, ensuring operational consistency and high-quality outcomes. • Track and optimize key metrics such as incident response times, operational efficiency, and compliance posture. • Develop and refine processes for incident response, vulnerability remediation, and compliance reporting. • Work with cross-functional teams, including consulting teams, SREs, and professional services teams, to improve service delivery.

Job Requirements

  • 7+ years of hands-on experience in technical roles, such as engineering or operations.
  • Proven ability to manage operational processes and handle escalations.
  • Experience balancing individual contributor work with oversight.
  • Strong technical expertise with SIEM platforms (e.g., Splunk, ELK, SumoLogic) and vulnerability management tools (e.g., Nessus, Qualys, Burp).
  • Proven ability to troubleshoot and resolve complex technical issues in high-pressure environments.
  • Hands-on experience with cloud platforms (AWS, Azure, or GCP) and their associated security practices.
  • Solid understanding of security compliance frameworks (e.g., FedRAMP, SOC, HIPAA).
  • Ability to mentor and guide team members while contributing to technical solutions.
  • Strong written and verbal communication skills, particularly in documenting and sharing technical insights.
  • Familiarity with IT frameworks such as ITIL or TOGAF.
  • Basic experience with automation tools (e.g., Terraform, Ansible).
  • Experience with Anti Virus tools (e.g. Trend Micro DSM, Crowdstrike, Microsoft Defender)
  • Experience with Agile delivery practices or lightweight project management tools.
  • Certifications in cloud platforms (AWS, Azure, GCP) are or security tools (e.g., Splunk, Nessus) are preferred but not required.
  • Bachelor’s degree (four-year college or university) *or* a equivalent work experience.

Benefits

  • paid parental leave
  • flexible time off
  • certification and training reimbursement
  • digital mental health and wellbeing support membership
  • comprehensive insurance options

Related Categories

Related Job Pages

More Security Operations Jobs

Security Operations43 days ago
Full TimeRemoteTeam 1,001-5,000Since 2008H1B Sponsor

Senior Security Operations Engineer ensuring security for Workiva's SaaS platform

AWSAzureCloudGoogle Cloud PlatformSplunk
United States
$111K - $178K / year

Associate SOC Analyst

UltraViolet Cyber

Unified Security Operations, Delivered.

Security Operations45 days ago
Full TimeRemoteTeam 201-500H1B No Sponsor

Associate Security Analyst ensuring cybersecurity for critical infrastructure and data

Cyber SecurityLinuxTCP/IP
United States
$65K - $75K / year

SOC Analyst Intern

ATPCO

The foundation of modern airline retailing

Security Operations46 days ago
InternshipRemoteTeam 201-500H1B Sponsor

Internship providing hands-on experience in security operations at ATPCO

AWSAzureCloudCyber SecuritySplunk
Virginia

Engineering Lead, Security Operations

Anchorage Digital

Trusted institutional partner in crypto and first federally chartered crypto bank

Security Operations50 days ago
Full TimeRemoteTeam 201-500Since 2017H1B Sponsor

Engineering Lead driving the growth of the Security Operations team

United States