Security Operations Engineer

<h3>Security Operations Engineer</h3> <h3><strong>About the Team</strong></h3> <p>The Security Operations team plays a critical role in protecting CircleCI’s infrastructure, product, and customer data against an evolving threat landscape. From incident response to hardening our cloud and CI/CD environments, the team works closely with engineering to keep CircleCI secure, resilient, and ready for what’s next.</p> <h3><strong>About the Role</strong></h3> <p>As a Security Operations Engineer, you’ll play a key role in protecting CircleCI’s infrastructure, product, and customer data against an evolving threat landscape increasingly shaped by AI-driven attacks and AI-augmented defenses. This intermediate-level role offers the opportunity to take meaningful ownership of security challenges, work closely with Engineering as a trusted security partner, and expand your impact across the organization. You’ll contribute to our security roadmap while leveraging AI tooling to advance how we detect, respond to, and automate security threats across CircleCI.</p> <h3><strong>What You’ll Do:</strong></h3> <p><strong>Threat Detection &amp; Incident Response</strong></p> <ul> <li>Monitor, investigate, and respond to security threats across CircleCI’s cloud and application environments, using security and AI-assisted tooling to improve detection and triage.</li> <li>Participate in security risk assessments, incident response, post-incident reviews, and rotating on-call support, turning findings into stronger controls and processes.</li> </ul> <p><strong>Security Engineering &amp; Architecture</strong></p> <ul> <li>Build and maintain security tooling, controls, and automation across cloud, application, and CI/CD environments, following established security patterns and best practices.</li> <li>Identify vulnerabilities and configuration risks, contribute to security runbooks and compliance requirements, and develop a growing understanding of CircleCI’s security architecture.</li> </ul> <p><strong>AI &amp; Security</strong></p> <ul> <li>Incorporate AI-powered security tools into day-to-day workflows and help evaluate emerging technologies that can improve detection, response, and automation.</li> <li>Stay current on AI-specific security threats and contribute to responsible approaches for using AI in security operations.</li> </ul> <p><strong>Cross-Team Partnership &amp; Ownership</strong></p> <ul> <li>Partner with Engineering teams to understand security needs, provide practical guidance, and translate technical risks into clear, actionable recommendations.</li> <li>Contribute to security roadmap planning, technology evaluations, and team documentation while building strong relationships across Security and Engineering.</li> </ul> <p><br><br></p> <h3><strong>What You’ll Bring:</strong></h3> <ul> <li>3+ years of security engineering or security operations experience, or equivalent demonstrated expertise.</li> <li>Hands-on experience with cloud, application, and CI/CD security, ideally in AWS, GCP, or Azure environments.</li> <li>Experience with security incident response and common security tooling, including EDR, CNAPP, SASE, vulnerability scanners, and log analysis.</li> <li>Ability to build and maintain security automation and tooling, with experience in languages or technologies such as Go, Python, or Terraform.</li> <li>Strong security judgment and problem-solving skills, with the ability to assess risk, make recommendations, and take action when information is incomplete.</li> <li>Hands-on experience using AI/ML-powered security tools in a production environment, with an understanding of where AI can improve security workflows and where human judgment remains essential.</li> </ul> <h3><strong>Bonus Skills (Nice to Have)</strong></h3> <ul> <li>Familiarity with AI-specific threat categories (prompt injection, model supply chain risks, LLM abuse patterns).</li> <li>Experience securing developer platforms, SaaS environments, or CI/CD infrastructure.</li> <li>Relevant certifications: CEH, AWS Security Specialty, Security+, or equivalent.</li> <li>Contributions to team process improvement, security runbook development, or internal knowledge sharing.</li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="title">Canada Base Pay Range</div><div class="pay-range"><span>$127,500</span><span class="divider">&mdash;</span><span>$159,500 CAD</span></div></div></div><div class="content-conclusion"><p></p> <p>We will ensure that individuals with disabilities are provided reasonable&nbsp;accommodation to participate in the job application or interview process, to perform&nbsp;essential job functions, and to receive other benefits and privileges of employment.&nbsp;Please contact us to request accommodation.</p> <p><strong>About CircleCI</strong></p> <p>CircleCI is the world’s largest continuous integration/continuous delivery (CI/CD)&nbsp;platform, and the hub where code moves from idea to delivery. As one of the most-used&nbsp;DevOps tools - processing more than 3 million jobs a day - CircleCI has unique access to&nbsp;data on how the most effective engineering teams work, and the tools to help software&nbsp;companies successfully leverage the power of AI into their commercial applications.&nbsp;Companies like Hinge, HuggingFace, and Samsung use us to improve engineering team&nbsp;productivity, release better products, and get to market faster.</p> <p><br>Founded in 2011 and headquartered in downtown San Francisco with a global, remote&nbsp;workforce, CircleCI is venture-backed by Base10, Greenspring Associates, Eleven Prime,&nbsp;IVP, Sapphire Ventures, Top Tier Capital Partners, Baseline Ventures, Threshold<br>Ventures, Scale Venture Partners, Owl Rock Capital, Next Equity Partners, Heavybit, and&nbsp;Harrison Metal Capital.&nbsp;</p> <p>CircleCI is an Equal Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sexual orientation, gender,&nbsp;gender identity, gender expression, transgender status, sexual stereotypes, age, status&nbsp;as a protected veteran, status as an individual with a disability, or other applicable&nbsp;legally protected characteristics. We also consider qualified applicants with criminal&nbsp;histories, consistent with applicable federal, state and local law.</p></div>