Security operations engineer (SecOps)

Description

We recruit for a high-traffic social gaming platform running on AWS and GCP.

You'll join the Platform team and own day-to-day security across the cloud, identity, edge and endpoints. You'll automate that work with AI, and work with engineering to stop bot abuse and fraud before it costs money.

• Cloud security (AWS + GCP): Enforce least-privilege IAM and org guardrails (SCPs and GCP org policies). Monitor and triage cloud security findings and audit logs. Harden the EKS clusters.
• Identity and access: Run JumpCloud and Google Workspace as the identity layer: SSO, MFA, access reviews and device policies.
• Edge protection: Own Cloudflare WAF, bot management, rate limiting and Zero Trust Access. Tune rules against signup bots, credential stuffing and abuse.
• Browser and endpoint security: Manage Island Enterprise Browser policies, including DLP, data boundaries and access to sensitive admin tools.
• Detection and response: Build alerts and write runbooks. Lead security incidents alongside SRE on-call, and follow through on post-incident fixes.
• Build AI agents that triage security alerts, enrich them with context and suggest or apply a response.

• 2+ years in SecOps, cloud security, or SRE/DevOps with a strong security focus
• Hands-on experience with AWS IAM and AWS security services, plus working knowledge of GCP
• Admin experience with an identity provider (JumpCloud, Okta or Google Workspace), including SAML/OIDC SSO, MFA and SCIM
• Experience with Cloudflare (WAF, rules, Zero Trust) or a comparable edge security platform
• Terraform, Git and Python, plus hands-on experience building automation with LLMs or AI agents (such as Claude, OpenAI or MCP-based tools)

• Google Cloud Professional Cloud Architect certification
• Island or another enterprise browser, or MDM tools
• Kubernetes/EKS security: RBAC, network policies and image scanning
• Fighting bots or fraud in gaming, fintech or e-commerce
• SIEM or detection engineering experience
• Other certifications such as AWS Security Specialty, Security+ or CCSK