Senior Security Operations Engineer
Fleetio, Remote - USA, CAN, MEX +1
What you will do
- Own detection engineering and threat hunting in CrowdStrike Next-Gen SIEM: onboard log sources, write and tune detections across identity, email, SaaS, and endpoint telemetry, and keep false positives down
- Own security automation: chain our tools together through CrowdStrike Fusion SOAR and our workflow automation platform so a signal in one (a risky Okta sign-in, a Falcon detection, a Mimecast hit, a Google Workspace sharing change) triggers enrichment, containment, paging, and ticketing in the others, plus AI agents that speed up triage and investigation, so routine response runs without waiting on a human
- Lead corporate incident response as technical lead, including third-party and supply-chain events: scope exposure quickly, confirm or rule out compromise, run forensics, tell leaders and employees what to do, keep runbooks current with Product Security, and serve in the escalation rotation, backing up the Incident Commander when needed