Job Description
The role involves managing and optimizing Aurora's enterprise security platforms through deep operational ownership, threat hunting, incident investigation, and continuous improvement to ensure robust security detection, response, and protection at scale.
Key Responsibilities
- Own the operational health, configuration, and continuous improvement of Aurora's enterprise security platform stack including EDR, XDR, SIEM, DLP, IAM, DNS security, Email security, and PKI.
- Develop and refine detection rules, correlation logic, and alert policies to reduce noise and maintain high-fidelity threat coverage.
- Conduct proactive threat hunting by analyzing security telemetry, forming hypotheses, querying logs, and investigating anomalies.
- Serve as the internal expert on Aurora’s security tooling, acting as escalation point for complex platform issues and detection failures.
- Participate in on-call rotations, leading investigations into security alerts and incidents, and driving triage, containment, and root cause analysis.
- Continuously audit and validate security controls to ensure proper configuration and effectiveness.
- Maintain operational runbooks, detection documentation, and platform configuration records for consistent and scalable security operations.
Requirements
- 12 years of hands-on experience in enterprise security operations, security platform administration, or a senior SOC engineering role with a career built on deep operational ownership of security tooling rather than software development.
- Expert-level proficiency administering and operating at least two enterprise security platforms such as CrowdStrike, SentinelOne, Splunk, Panther, Sentinel, Jamf, Kandji Iru, Puppet, WorkspaceONE, Intune, Zscaler, Okta, Proofpoint, Wiz, osquery, with strong working knowledge across several others.
- Demonstrated ability to tune and optimize security platforms beyond out-of-the-box configurations by writing custom detection logic, adjusting policy sets, and validating control effectiveness.
- Strong log analysis and threat hunting skills, including building hypotheses, writing queries, following investigative threads, and knowing when to escalate.
- Experience conducting thorough incident investigations, including triage, containment, root cause analysis, and post-incident review, and communicating findings clearly to technical and non-technical stakeholders.
- Ability to assess security control effectiveness by verifying proper configuration, scope coverage, and generation of actionable signals, not just deployment.
- Comfort working under pressure in ambiguous, fast-moving situations with competing priorities.
Benefits & Perks
- Base salary range: 189,000 - 274,000 per year
- Annual bonus
- Equity compensation
- Hybrid work environment (in-office at least 3 days per week)
Ready to Apply?
Join Aurora and make an impact in renewable energy
Stay Updated on Sustainability Jobs
Get the latest renewable energy jobs and career tips delivered to your inbox.
Job Alerts
Get notified about new sustainability jobs