SecOps Engineer

Description

Global-e (Nasdaq: GLBE) is the world’s leading platform for global direct-to-consumer e-commerce, enabling brands and retailers to seamlessly sell worldwide, delivering localized experiences across markets.

Trusted by some of the world’s most recognized brands including Adidas, Alo Yoga, Logitech, Hugo Boss, Marc Jacobs, and Victoria’s Secret, we operate on a massive global scale through dynamic teams across North America, EMEA, and APAC.

Our technology-based end-to-end solution combines advanced localization capabilities, streamlined global operations and extensive big-data analytics, covering everything merchants need to scale worldwide. We’re a fast-moving, highly collaborative company where innovation, creativity, ownership, and impact are part of everyday work.

We are seeking a SecOps Engineer to join our Security Operations Department. You will turn security strategy into working protection. You will evaluate new technologies, run POV/POCs, and deploy and operate security controls across Endpoint, Data, AI, Network and Cloud Security. You will also make sure every new control strengthens our detection and response. Working alongside our Security Architecture division, you will take designs from concept to production, and you will build the integrations and automation that keep our controls effective. You will work closely with Cloud, DevOps, IT and R&D teams, and with our external MDR and incident response partners.

You have:

• Deploy, configure and operate new security controls across Endpoint, Data Security, AI Security, Network Security and Cloud Security, from initial rollout through tuning and steady-state operations.
• Evaluate security technologies and vendors, defining success criteria, running POV/POCs and delivering clear, data-driven recommendations.
• Partner with Security Architecture to turn designs and requirements into production-ready implementations, and feed back lessons learned from real-world operations.
• Integrate security controls with the SOC, making sure every new control sends the right telemetry, produces actionable detections and has a defined response path.
• Build and tune detections mapped to MITRE ATT&CK and prioritized by business risk, using detection-as-code practices.
• Develop SOAR playbooks and automations for enrichment, triage and containment, cutting manual effort and response time.
• Build AI-assisted SOC capabilities, such as automated investigation and alert summarization, with the right guardrails and human oversight.
• Develop integrations and internal tooling through APIs, webhooks and scripts to connect security controls, ticketing and collaboration platforms.
• Continuously harden and validate controls through configuration reviews, coverage testing and remediation of gaps.
• Work with our MDR provider on integration, escalation logic, detection coverage and tuning.
• Support incident response as a technical escalation point, including scoping, containment and fixing control gaps.
• Support compliance and audit requirements (PCI DSS, SOC 2, ISO 27001) with evidence on security controls, monitoring and incident handling.
• Take part in a rotating on-call schedule to make sure critical security events get a timely response.
• Mentor team members and contribute to engineering standards and documentation.

You Are:

• A hands-on builder, happiest when taking a new security capability from evaluation to production.
• Pragmatic and outcome-driven, balancing security, usability and business impact.
• Curious about emerging technologies, especially in AI and cloud security, and quick to learn them in depth.
• Analytical and detail-oriented, with a strong understanding of how attackers operate and how controls stop them.
• Calm under pressure, able to contribute effectively during active incidents.
• An excellent communicator in both speech and writing, comfortable presenting findings and recommendations to engineers and leadership.
• A team player committed to building strong relationships and helping others grow.

Requirements

• 5+ years of experience in security engineering, with hands-on deployment and operation of enterprise security controls.
• Proven experience leading security technology evaluations and POV/POCs through to production rollout.
• Hands-on experience with a broad range of security controls, such as DSPM/DLP, CSPM/CNAPP, EDR/XDR, WAF, network security and secure access solutions.
• Familiarity with AI security risks and controls, such as protecting data in AI tools, securing AI agents and governing AI usage.
• Deep knowledge of cloud security in AWS, including IAM, networking, logging and workload protection. Experience with other public clouds is an advantage.
• Experience securing identity platforms and SaaS environments.
• Hands-on SIEM and SOAR experience, including building detections, automations and integrations through APIs.
• Strong scripting skills in Python (or similar), plus experience with Git-based workflows and infrastructure as code.
• Proven experience working with MDR/MSSP providers, including onboarding, integration and defining escalation paths.
• Solid understanding of networking, operating systems (Windows, macOS, Linux) and the MITRE ATT&CK framework.
• Willingness to take part in on-call rotating shifts.
• Experience working in regulated environments, PCI DSS in particular. This is an advantage.
• Relevant certifications such as CISSP, AWS Security Specialty, GCIH, GCDA or OSCP are an advantage.