Security Operations Engineer

About the Team The Security Operations team protects CircleCI’s infrastructure, product, and customer data against evolving threats, working closely with engineering to maintain security and resilience. About the Role As a Security Operations Engineer, you will protect CircleCI’s infrastructure, product, and customer data from AI-driven attacks and defenses. This intermediate role involves ownership of security challenges, collaboration with Engineering, contributing to the security roadmap, and leveraging AI tools to detect, respond to, and automate security threats. What You’ll Do: Threat Detection & Incident Response — Monitor, investigate, and respond to security threats across cloud and application environments using security and AI-assisted tools. — Participate in risk assessments, incident response, post-incident reviews, and on-call support, improving controls and processes. Security Engineering & Architecture — Build and maintain security tooling, controls, and automation across cloud, application, and CI/CD environments following best practices. — Identify vulnerabilities and configuration risks, contribute to runbooks and compliance, and understand CircleCI’s security architecture. AI & Security — Incorporate AI-powered security tools into workflows and evaluate emerging technologies for detection, response, and automation. — Stay current on AI-specific security threats and contribute to responsible AI use in security operations. Cross-Team Partnership & Ownership — Partner with Engineering teams to understand security needs, provide guidance, and translate risks into actionable recommendations. — Contribute to security roadmap planning, technology evaluations, and documentation while building relationships across teams. What You’ll Bring: — 3+ years of security engineering or operations experience or equivalent expertise. — Hands-on experience with cloud, application, and CI/CD security in AWS, GCP, or Azure. — Experience with incident response and security tools including EDR, CNAPP, SASE, vulnerability scanners, and log analysis. — Ability to build and maintain security automation and tooling using Go, Python, or Terraform. — Strong security judgment and problem-solving skills. — Hands-on experience with AI/ML-powered security tools in production and understanding of AI’s role in security workflows. Bonus Skills (Nice to Have): — Familiarity with AI-specific threat categories like prompt injection and model supply chain risks. — Experience securing developer platforms, SaaS, or CI/CD infrastructure. — Relevant certifications such as CEH, AWS Security Specialty, Security+. — Contributions to process improvement, runbook development, or knowledge sharing. Accommodation CircleCI provides reasonable accommodation for individuals with disabilities during application and employment. About CircleCI CircleCI is the world’s largest CI/CD platform, processing over 3 million jobs daily, helping companies leverage AI in software delivery. Founded in 2011, headquartered in San Francisco with a global remote workforce, and venture-backed by multiple investors. Equal Opportunity CircleCI is an Equal Opportunity and Affirmative Action employer, not discriminating based on legally protected characteristics and considering applicants with criminal histories consistent with laws.