SecOps Security Engineer (Staff-level, L6)

Synthesia is an AI video platform for business focused on enhancing visual communication and enterprise skill development. The Staff SecOps Security Engineer will join the Security Operations team to build cloud security improvements, detection and response capabilities, incident investigation workflows, and internal security automation across the company’s infrastructure.

Responsibilities:

• Build and own deeply technical security improvements across our Cloud Infrastructure(s) and associated territory (AWS/GCP, Kubernetes, CI/CD), including shipping production changes yourself when needed
• Design, implement, and iterate on detection and response capabilities (SIEM, EDR/MDR, cloud-native detections, CNAPP) with an engineer’s bias for automation, reliability, and measurable outcomes
• Hunt, investigate, and respond to security alerts and suspicious activity end-to-end (triage → containment → eradication → recovery → learnings), including writing tooling and detection logic to prevent recurrence
• Build internal security tooling and automations (IaC, scripts, integrations) that reduce toil and raise the security bar by default

Requirements:

• • You're a deeply technical security engineer with a builder/hacker mindset, able to go from idea → prototype → production and comfortable making changes directly in Cloud Infra / DevOps systems
• • Have worked in a fast-growing startup, scale-up and/or SaaS company
• • Cloud security engineering in AWS and/or GCP, with the ability to implement improvements hands-on (IAM, networking, compute, storage, logging)
• • Kubernetes security (cluster hardening, workload isolation, runtime security, policy controls) and container ecosystems
• • DevOps fundamentals: CI/CD security, secrets management, artifact integrity, and secure-by-default platform patterns
• • Incident response and investigation, including creating repeatable playbooks and automating response where appropriate
• • Strong programming/scripting ability (Python or similar) plus comfort with infrastructure-as-code (e.g., Terraform) and automation
• • Serious agent coding - ideally you're on the bleeding edge in the space
• • Endpoint security tooling, such as CrowdStrike
• • You have 5+ years of hands-on security engineering experience, ideally in a cloud-first SaaS environment
• • Hands on experience with any/all of: Hunters, Wiz, Falcon, Tracebit, Torii, Okta, Google Workspace, StrongDM, Github, StepSecurity, Dope Security
• • Any relevant Information Security certification, e.g AWS Certified Security, GIAC GWEB, OSCP, or CSSLP