Slack's Security team is seeking a Senior Security Operations Engineer to join their Security Engineering team. The role focuses on threat detection, logging, and remediation within Slack's infrastructure. The ideal candidate will work with a dozen-person team of multidisciplinary engineers who handle SecDevOps, Go programming, Python development, and Elasticsearch scaling.
The position involves working directly on the Slack Security Operations team, focusing on threat detection, logging, and remediation. The team values comprehensive system monitoring and maintains detailed records of all environmental actions. They're particularly interested in candidates with experience in APT tradecraft and threat intelligence.
The role offers significant autonomy in defining workstreams and approaching engineering problems creatively. Team members collaborate across the company, maintaining an approachable and inclusive team environment. The security team operates as part of the broader engineering organization, ensuring integrated security solutions.
Key technologies include AWS for infrastructure, Elasticsearch/Kibana for information access and metrics, Kafka for data streaming, and Google Chronicle for both self-hosted and hosted security solutions. The team emphasizes sustainable solutions over quick fixes and maintains a strong focus on building maintainable, high-quality systems.
This position offers an opportunity to work with a team that takes security seriously while maintaining a collaborative and innovative approach to problem-solving. The role combines technical expertise with creative thinking, making it ideal for security professionals who want to make a significant impact on a platform used by millions.