[![Image](https://upload.wikimedia.org/wikipedia/commons/8/82/Telegram_logo.svg) Fresh remote jobs, sorted by category — join Jobicy on Telegram › Fresh remote jobs on Telegram ›](https://t.me/JobicyJobs) [All remote jobs](https://jobicy.com/jobs.md)Open role[![SWORD Health logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/5dda1790-221.jpg)](https://jobicy.com/company/sword-health.md)Remote opportunity at[SWORD Health](https://jobicy.com/company/sword-health.md) # Senior Security Operations Engineer Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/sword-health.md)Share31 Aug 2026Published22Listing views1Application actions30 Sep 2026Apply before Opportunity details ## About this role. AI SummarySword Health is seeking a senior security operations engineer to protect cloud infrastructure and applications through detection engineering, incident response, threat hunting, and digital forensics. The role owns incident handling from detection through recovery, improves alert quality and triage, and develops automated runbooks using SIEM, SOAR, EDR/XDR, scripting, and AI-assisted workflows. Candidates need substantial cloud-security expertise, operational knowledge of frameworks such as NIST 800-61 and MITRE ATT&CK, and the ability to lead cross-functional response efforts under pressure. US citizenship and the ability to obtain and maintain a US public trust clearance are mandatory, with US work authorization required. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 5/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a senior, high-impact security operations role requiring deep hands-on capability across cloud detection, forensics, incident command, automation, and threat intelligence. The engineer must make sound decisions during high-pressure incidents while coordinating technical and non-technical stakeholders and validating AI-assisted operational decisions. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job medianMarket rate$171,000US market range$145k–$210k0$231k AI insightThe disclosed yearly total-compensation range is USD 133,000 to USD 209,000, with a midpoint of USD 171,000. This is broadly competitive for a US-based senior security operations engineer, particularly given the cloud, incident-response, clearance, and AI-security automation requirements. Estimated US market range for comparable roles is USD 145,000 to USD 210,000 annually, varying by location, clearance status, and depth of cloud-security experience. ## Core skills Skills and capabilities most closely associated with this opportunity. [Security Operations](https://jobicy.com/jobs?search_keywords=Security%20Operations.md)[Incident Response](https://jobicy.com/jobs?search_keywords=Incident%20Response.md)[Cloud Security](https://jobicy.com/jobs?search_keywords=Cloud%20Security.md)[Threat Hunting](https://jobicy.com/jobs?search_keywords=Threat%20Hunting.md)[Detection Engineering](https://jobicy.com/jobs?search_keywords=Detection%20Engineering.md)[Digital Forensics](https://jobicy.com/jobs?search_keywords=Digital%20Forensics.md)[SIEM](https://jobicy.com/jobs?search_keywords=SIEM.md)[SOAR](https://jobicy.com/jobs?search_keywords=SOAR.md)[EDR/XDR](https://jobicy.com/jobs?search_keywords=EDRXDR.md)[Python Automation](https://jobicy.com/jobs?search_keywords=Python%20Automation.md) Sample interview questionsHow would you improve a noisy cloud-security detection pipeline without increasing the risk of missed incidents?I would baseline alert volume, severity, true-positive rate, mean time to triage, and analyst disposition data. I would then tune detections using asset criticality, identity context, threat intelligence, and behavioral baselines; test changes in a monitored or replay environment; and retain coverage through layered controls and periodic adversary simulations. Describe your approach to leading a significant security incident from initial alert through recovery. I first validate scope and severity, establish an incident command structure, preserve relevant evidence, and contain the threat using the least disruptive effective controls. I coordinate clear workstreams across security, engineering, IT, legal, and leadership, provide time-bound status updates, and then lead eradication, recovery validation, root-cause analysis, and corrective detection or control improvements. How have you used scripting and automation to make security operations more effective? I use Python or Bash to enrich alerts with identity, asset, vulnerability, and threat-intelligence context; normalize evidence; automate repetitive containment or ticketing steps; and measure workflow results. I ensure automations have approvals, logging, rollback paths, and human review for high-impact decisions. How would you evaluate an AI-assisted alert-triage or incident-classification workflow before deploying it broadly? I would define acceptable accuracy, false-positive, false-negative, latency, auditability, and security thresholds, then test the workflow against representative historical and adversarial cases. I would restrict permissions and data exposure, require analyst validation for material actions, monitor drift and errors after rollout, and maintain a manual fallback process. What evidence would you collect during a cloud-focused forensic investigation? I would preserve cloud audit logs, identity-provider events, endpoint telemetry, network flow and DNS records, workload and container logs, snapshots where appropriate, configuration history, and relevant application events. I would document chain of custody, correlate activity into a timeline, identify initial access and persistence mechanisms, and translate findings into containment actions and durable detection improvements. At Sword, we’re building AI to heal billions and unlock humanity’s full potential. In doing so, we’re pioneering AI Care, a fundamentally new approach to healthcare built for medical reasoning, safety, and real-time treatment, not generic technology applied after the fact. As both a clinical-centric frontier AI lab and an applied AI platform, Sword is reimagining how care is delivered at scale, removing traditional barriers like appointments, waiting rooms, and stigma so more people can access the care they need – and ultimately get back to lives lived in full. Since 2020, Sword has expanded across Musculoskeletal, Women’s Health, Cardiometabolic, and Mental Health, and is now moving beyond the session to a fully AI-native, 24/7 care program that brings physical activity, therapeutic exercise, psychotherapy, nutrition, and behavior change into one connected experience. More than 1 million members across three continents have completed over 15 million AI sessions, helping 2,000+ enterprise clients avoid more than $1 billion in unnecessary healthcare costs. Backed by 59 clinical studies, 43 patents, and more than $500 million raised from leading investors including Khosla Ventures, General Catalyst, and Founders Fund, Sword is defining a new standard for healthcare. Role As a Senior Security Engineer (Security Operations) at Sword, you will be at the forefront of safeguarding our cloud infrastructure and applications. Your expertise will ensure robust security measures, incident response, and continuous improvement. Are you looking to join an incredible IT team, passionate about simplifying everyone’s work? Look no further, we’re hiring! We’re a proactive team, constantly staying ahead to ensure everything runs smoothly. As an IT Team we understand the importance of technology in today’s workplace and the impact that technical issues can have on productivity and efficiency. Want to join the team? Find out if you’ve got what it takes! To get to know more about our Tech Stack, check [here](https://stackshare.io/sword-health/sword-health). AI Proficiency at Sword Health AI fluency is a core expectation at Sword Health. Every candidate is assessed against our three-level framework — be ready to share real examples of how AI is already part of how you work. * Explorer (Level 1) — Uses AI daily to boost personal productivity * Builder (Level 2) — Creates workflows and tools that elevate the whole team * Integrator (Level 3) — Embeds AI into products and processes at scale Every hire must demonstrate at least Level 1. The expected level will vary depending on the seniority of the role. ### What you’ll be doing * Design and continuously improve detection and alerting controls, ensuring high fidelity and contextual relevance to reduce noise and enable rapid response. * Build, test, and automate incident response playbooks and runbooks, increasing efficiency and consistency across the incident lifecycle. * Drive prioritization of alerts using a data-driven, scalable triage framework, aligned with business impact and threat context. * Lead in-depth investigations, including root cause analysis and digital forensics, and convert findings into actionable insights to strengthen detection and resilience. * Proactively engage in threat intelligence and threat hunting, identifying new tactics, techniques, and procedures (TTPs), enriching existing controls, and feeding insights into the detection pipeline. * Own incident handling from detection to resolution, collaborating with engineering, IT, and business teams to contain, eradicate, and recover from threats. * Define and maintain operational metrics for incident response, using them to drive continuous improvement in speed, accuracy, and organizational readiness. ### What you need to have * Required: Public Trust Clearance – Candidates must be able to obtain and maintain a US public trust clearance. * Bachelor’s degree in Computer Science, Cybersecurity, or equivalent professional experience. * Solid experience in cloud environments (AWS, GCP, or Azure), with strong understanding of cloud-native threats. * Proficiency in scripting languages (e.g., Python, Bash) for automation and tooling development. * Hands-on experience with SOC tools and platforms, such as SIEM (Splunk, Sentinel, etc.), SOAR, EDR/XDR, and log management. * Strong understanding of incident containment and eradication strategies, with proven ability to coordinate response with technical teams. * Familiarity with security frameworks and standards (NIST 800-61, CIS Controls, MITRE ATT&CK, ISO 27001). * Excellent analytical, critical thinking, and problem-solving skills. * Ability to consume and synthesize intelligence about actors, techniques or situations to identify emerging risk scenarios. * Proficiency in process formulation and improvement. * Background in threat modeling, adversary emulation, and risk-based alert tuning. * Strong communicator with the ability to explain security risks and actions to both technical and non-technical audiences. * Proven track record of leading cross-functional efforts in high-pressure situations. * Ability to foster collaboration across InfoSec, IT, and engineering teams. * Forensics experience, investigating incidents and preserving digital evidence. * Leverage AI to automate and optimize security operations workflows, including alert triage, enrichment, and incident classification. * Design and maintain AI-assisted runbooks, ensuring consistency, auditability, and human-in-the-loop validation for critical decisions. * Identify opportunities to improve SOC efficiency through AI-driven automation, while maintaining strong controls and avoiding over-reliance on unverified outputs. * Integrate security tooling with AI platforms and APIs to streamline investigation, response, and reporting processes. * Enhance vulnerability management and incident response workflows through intelligent prioritization, correlation, and contextualization of findings. * Continuously evaluate the accuracy, reliability, and security implications of AI-assisted decisions in operational environments. ### Public Trust Clearance Candidates must be able to obtain and maintain a US public trust clearance. Please note that US citizenship is required to obtain and maintain a government security clearance. ### Compensation ### Additional Information *This range includes base, variable and equity. These compensation bands are just the starting point. Once someone joins and proves they’re outlier talent, we adjust quickly to ensure their compensation aligns with their impact. Our job titles may span more than one career level. Actual pay is determined by skills, qualifications, experience, location, market demand, and other factors. Compensation details listed in this posting reflect the base salary and any potential variable, bonus or sales incentives, and the Company’s estimation of the value of private company stock options, if applicable. The pay range is subject to change, future value of company stock options is not guaranteed, and compensation may be modified in the future. In addition to our total compensation, Sword offers a number of benefits as listed below. US – Sword Benefits & Perks: • Comprehensive health, dental and vision insurance* • Life and AD&D Insurance* • Financial advisory services* • Supplemental Insurance Benefits (Accident, Hospital and Critical Illness)* • Health Savings Account* • Equity shares* • Discretionary PTO plan* • Parental leave* • 401(k) • Flexible working hours • Remote-first company • Paid company holidays • Free digital therapist for you and your family *Eligibility: Full-time employees regularly working 25+ hours per week Note: Applicants must have a legal right to work in the United States, and immigration or work visa sponsorship will not be provided. SWORD Health, which includes SWORD Health, Inc. and Sword Health Professionals (consisting of Sword Health Care Providers, P.A., SWORD Health Care Providers of NJ, P.C., SWORD Health Care Physical Therapy Providers of CA, P.C.*) complies with applicable Federal and State civil rights laws and does not discriminate on the basis of Age, Ancestry, Color, Citizenship, Gender, Gender expression, Gender identity, Gender information, Marital status, Medical condition, National origin, Physical or mental disability, Pregnancy, Race, Religion, Caste, Sexual orientation, and Veteran status. Show more [Apply now >](https://jobicy.com/jobs/152254-senior-security-operations-engineer-2.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. Matched by job category10 related opportunities[Cybersecurity](https://jobicy.com/categories/cybersecurity.md) [Browse all jobs](https://jobicy.com/jobs.md) * ![Zscaler logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b3234031-221.png) Zscaler Aug 31 ### [Director, Specialist Sales Engineering – Data Security](https://jobicy.com/jobs/152257-director-specialist-sales-engineering-data-security.md) About Zscaler Zscaler accelerates digital transformation to ensure our customers can be more agile, efficient, resilient, and secure. As an AI-forward enterprise, we are constantly pushing the envelope, leveraging the… * ![Reddit logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/Reddit.jpg) Reddit Aug 31 ### [Staff Product Security Engineer](https://jobicy.com/jobs/152256-staff-product-security-engineer.md) Reddit is a community of communities. It’s built on shared interests, passion, and trust, and is home to the most open and authentic conversations on the internet. Every day, Reddit… * ![Apollo.io logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/f3c639242c4d1f4cb9c0730ac3842a72.jpeg) Apollo.io Aug 31 ### [Senior Application Security Engineer](https://jobicy.com/jobs/152253-senior-application-security-engineer-2.md) Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally, from rapidly growing startups to some of the world’s largest enterprises…. * ![Reddit logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/Reddit.jpg) Reddit Aug 31 ### [Senior Security Engineer, AI Security](https://jobicy.com/jobs/152252-senior-security-engineer-ai-security.md) Reddit is a community of communities. It’s built on shared interests, passion, and trust, and is home to the most open and authentic conversations on the internet. Every day, Reddit… * ![Maven Clinic logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/07/c4b2d5ecf34b-221.webp) Maven Clinic Aug 31 ### [Staff Software Engineer – Product Security](https://jobicy.com/jobs/152250-staff-software-engineer-product-security.md) Maven Clinic is the world’s largest virtual clinic for women and families on a mission to make healthcare work for all of us. Through Maven Enterprise, the company partners with… * ![SWORD Health logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/5dda1790-221.jpg) SWORD Health Aug 31 ### [Security Operations Lead (SecOps)](https://jobicy.com/jobs/152249-security-operations-lead-secops.md) At Sword, we’re building AI to heal billions and unlock humanity’s full potential. In doing so, we’re pioneering AI Care, a fundamentally new approach to healthcare built for medical reasoning,… * ![Apollo.io logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/f3c639242c4d1f4cb9c0730ac3842a72.jpeg) Apollo.io Aug 31 ### [Engineering Manager, Security Detection & Response](https://jobicy.com/jobs/152248-engineering-manager-security-detection-response.md) Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally, from rapidly growing startups to some of the world’s largest enterprises…. * ![YipitData logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e1bee9df-221.jpg) YipitData Aug 31 ### [Product Security Engineer](https://jobicy.com/jobs/152175-product-security-engineer.md) About Us: YipitData is the leading market research and analytics firm for the disruptive economy and most recently raised $475M from The Carlyle Group at a valuation of over $1B…. * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Aug 31 ### [Senior Cyber Threat Intelligence Analyst](https://jobicy.com/jobs/152158-senior-cyber-threat-intelligence-analyst.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Aug 31 ### [Staff Cyber Threat Intelligence Analyst](https://jobicy.com/jobs/152155-staff-cyber-threat-intelligence-analyst.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build…