Lead Engineer, Security Operations Platform

Required Qualifications

• At least 5 years of full-time experience in security engineering, security operations engineering, or SecOps platform engineering, with demonstrable seniority appropriate to a manager-level individual contributor role.
• Solid hands-on experience from working within a SOC or incident response setup.
• Proven experience engineering and operating SIEM platforms, including data connectors, analytics rules, workspace architecture, ingestion optimization, and cost management. Experience with NDR platforms is a strong plus.
• Applied experience with infrastructure-as-code (e.g., Terraform, Bicep/ARM, or equivalent), including managing security platform content and configuration through version control rather than manual administration.
• Demonstrated working experience with Git, DevOps practices, and CI/CD pipelines applied to security tooling - for example detection-as-code, automated content deployment, or pipeline-driven platform changes.
• Proficiency in Python for building integrations, API clients, data onboarding tooling, and automation supporting platform operations.
• Solid understanding of cloud and identity ecosystems relevant to Pandora's environment: Azure, Entra ID, and Active Directory
• Knowledge about monitoring patterns for PaaS/SaaS services and modern application architectures is a plus.
• Experience integrating security platforms with enterprise tooling (e.g., SOAR, ITSM) and maintaining stable, secure, and well-documented integrations.
• Strong collaboration and communication skills, with the ability to work directly with application and product teams, translate security requirements into engineering deliverables, and influence without formal authority.