Staff Security Operations Engineer

Conviva is the experience analytics platform for AI agents, apps, and streaming. Conviva pioneered quality of experience measurement for streaming video and has supported live digital experiences across 20 Super Bowls, 10 Olympic Games, and five FIFA World Cup tournaments. With full-census, real-time, stateful analytics, Conviva shows what consumers actually experience, not just whether systems are running, and connects that experience to revenue, retention, and risk. We are seeking an experienced Staff Security Operations Engineer with 8 to 10 years of hands-on expertise to lead our security operations, threat detection, incident response, and security automation efforts. In this role, you will be responsible for safeguarding enterprise systems, cloud environments, and critical assets from cyber threats. You will design, implement, and maintain advanced detection and response capabilities while partnering with IT, DevOps, and business stakeholders. What Success Will Look Like: 1. Security Operations & Threat Detection • Lead the monitoring, detection, and continuous improvement of security operations across multi-cloud (AWS, Azure, GCP) and hybrid enterprise infrastructure. • Optimize SIEM and SOAR platforms by creating and tuning custom detection rules, dashboards, and automated response playbooks. • Proactively conduct threat hunting using threat intelligence feeds, behavioral analytics, and indicators of compromise (IOCs) to identify hidden risks. 2. Incident Response & Digital Forensics • Serve as the technical lead for high-severity security incidents, managing end-to-end containment, eradication, recovery, and post-incident root-cause analysis (RCA). • Direct digital forensics and incident response (DFIR) investigations across endpoints, networks, and cloud logs. • Maintain and conduct periodic tabletop exercises to ensure incident response plans remain updated and effective. 3. Security Automation & Orchestration (DevSecOps Alignment) • Drive "Security as Code" principles by integrating security controls and continuous automated monitoring into CI/CD pipelines and IaC (Terraform, CloudFormation). • Develop custom automation scripts (Python, PowerShell, Bash, Go) to streamline repetitive security tasks, reduce false positives, and accelerate MTTR (Mean Time to Respond). 4. Infrastructure & Cloud Security Integration • Design and enforce security policies for network security, IAM, zero-trust architectures, containerized environments (Kubernetes, Docker), and SaaS applications. • Conduct regular vulnerability management cycles, prioritizing remediation based on business impact and threat severity. 5. Compliance • Provide technical guidance to Tier 1/2 SOC analysts and different component SPOCs. • Collaborate with audit and compliance teams to ensure alignment with security frameworks (ISO 27001, SOC 2, GDPR). • Prepare executive briefings and operational metrics (e.g., MTTD, MTTR, vulnerability turnaround) for senior leadership. Who You Are and What You've Done: 1. Required Qualifications & Technical Skills • Experience: 8–10 years of progressive cybersecurity experience, with at least 5+ years dedicated to Security Operations (SOC), Incident Response, or DevSecOps. • SIEM & SOAR Expertise: Deep hands-on experience configured, managed, and tuned Enterprise SIEM (Splunk, Microsoft Sentinel, Elastic) and SOAR platforms (Palo Alto XSOAR, Swimlane, Tines). • Cloud Security: Deep familiarity with securing cloud infrastructure (AWS, Azure, or GCP), cloud-native security tools (GuardDuty, Defender, CloudTrail), and identity controls. • Scripting & Automation: Strong proficiency in at least one programming/scripting language (Python, PowerShell, Bash, or Go) for automation and API integrations. • Network &