Senior Security Operations Engineer (1 Year Fixed Term)

Join League, a leading health technology company, as a Senior Security Operations Engineer. In this role, you will be responsible for managing and maintaining security tools and technologies, developing automation scripts, conducting threat research, and ensuring compliance with security standards. You will collaborate with other teams to integrate security into all aspects of the organization's operations and communicate security risks to both technical and non-technical audiences. This is a one-year fixed-term position with flexible medical and dental plans, 401(k) matching, and generous leave policies.

• Manage and maintain security tools and technologies, such as CrowdStrike NG SIEM, EDR, Falcon Complete, Wiz Defend and Netskope SASE.
• Develop and implement automation scripts and workflows to improve security operations efficiency and effectiveness.
• Conduct threat research and analysis to identify emerging threats and vulnerabilities, and develop and implement threat detection rules and use cases.

• As always, if this is your skillset we encourage you to apply. We also accept and encourage applicants who have existing software engineering experience and want to explore security and applicants who may have done a security program in a post-secondary institution
• Excellent communication and interpersonal skills
• Deep and broad technical understanding of security concepts, principles, and technologies
• Minimum of 3 years in Security Operations with hands-on experience in SOAR and other automation tools
• Strong analytical and problem-solving skills
• Advanced knowledge of Security Operations tools (e.g., CrowdStrike NG SIEM, EDR, Falcon Complete, Netskope, Wiz Defend), including configuration and administration of these tools
• Experience with threat intelligence platforms and implementing these in security operations
• Proven leading and coordinating incident response processes and methodologies
• Bachelor of Science degree (BS) in Computer Science (or a related field)
• Minimum of 7 years in Cybersecurity with a strong focus on Incident Response
• You are a collaborator at your core
• Experience building or integrating LLM-based agents/copilots into SIEM, SOAR, or EDR workflows (e.g., incident summarization, IOC enrichment, case triage)
• Proficiency in scripting languages (e.g., Python, Go)
• Curiosity and openness to experimenting with new technologies
• Demonstrated experience using AI tools in a practical, responsible way
• Ability to balance efficiency with quality and sound judgment
• Knowledge of networking protocols and security
• Experience with digital forensics
• Experience with cloud security (AWS, Azure, GCP)
• Contributions to the security community at League, and more broadly (eg. blog posts, conference presentations, etc.)
• Experience with Security Orchestration,Automation and Response (SOAR)
• Security certifications (e.g., OffSec Certifications, GIAC Certifications)