[![Image]() Meet Jobicy Copilot — free AI autofill for job applications + remote job alerts ›](#) [All remote jobs](https://jobicy.com/jobs.md)Open role[![LivePerson logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/49f9583c-221.jpeg)](https://jobicy.com/company/liveperson.md)Remote opportunity at[LivePerson](https://jobicy.com/company/liveperson.md) # SecOps Engineer I Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/liveperson.md)Share15 Sep 2026Published50Listing views2Application actions15 Oct 2026Apply before Opportunity details ## About this role. AI SummaryLivePerson is hiring a SecOps Engineer I to support security operations across cloud and on-premise infrastructure. The role focuses on alert triage, incident investigation, log analysis, vulnerability testing, security-tool maintenance, and documentation of SOPs and playbooks. Candidates need hands-on experience with multi-cloud environments, GCP, Elastic, Okta, IAM/IDM, Active Directory, JAMF, and Windows, Linux, and macOS systems. This remote Bulgaria-based position requires English fluency, US-hours support availability, and participation in an on-call rotation. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 4/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 3/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThe position requires broad practical security operations knowledge across cloud, identity, endpoint, and monitoring technologies, plus the ability to investigate active security events. On-call responsibilities, operational troubleshooting, and coordination with IT and systems teams create a fast-moving environment. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job medianHighly competitive$110,000US market range$95k–$125k0$138k AI insightNo actual salary was disclosed in the posting. This is a US-market estimate in USD for an early-career SecOps/Security Operations Engineer with approximately three or more years of relevant SaaS or cloud infrastructure experience; local Bulgaria compensation may differ materially. ## Core skills Skills and capabilities most closely associated with this opportunity. [Security operations](https://jobicy.com/jobs?search_keywords=Security%20operations.md)[Incident response](https://jobicy.com/jobs?search_keywords=Incident%20response.md)[Cloud security](https://jobicy.com/jobs?search_keywords=Cloud%20security.md)[GCP](https://jobicy.com/jobs?search_keywords=GCP.md)[Elastic](https://jobicy.com/jobs?search_keywords=Elastic.md)[Okta](https://jobicy.com/jobs?search_keywords=Okta.md)[Identity and access management](https://jobicy.com/jobs?search_keywords=Identity%20and%20access%20management.md)[Log analysis](https://jobicy.com/jobs?search_keywords=Log%20analysis.md)[Endpoint security](https://jobicy.com/jobs?search_keywords=Endpoint%20security.md)[Python or Go](https://jobicy.com/jobs?search_keywords=Python%20or%20Go.md) Sample interview questionsHow would you triage a high-severity alert from a SIEM or monitoring platform?I would first validate the alert by reviewing its source, affected assets, timestamps, related logs, and detection logic. I would assess scope and business impact, contain the issue if needed, collect evidence, escalate according to the incident process, and document findings and next actions in the ticket. Describe how you would investigate suspicious authentication activity in Okta or Active Directory. I would review sign-in logs for unusual IP addresses, locations, devices, impossible travel, repeated failures, privilege changes, and MFA events. I would correlate those events with endpoint and network telemetry, verify whether the activity is legitimate with the user or owner, and revoke sessions, reset credentials, or disable accounts when compromise is suspected. What steps would you take to harden a cloud workload in GCP? I would apply least-privilege IAM roles, enforce strong authentication, restrict network exposure, enable centralized audit logging, manage secrets securely, and ensure encryption is configured for data in transit and at rest. I would also use configuration monitoring, vulnerability management, patching, and periodic reviews against security baselines. How do you make security playbooks useful during an incident? A useful playbook has clear triggers, ownership, severity criteria, evidence-collection steps, containment actions, escalation contacts, communication templates, and closure requirements. I would keep it concise, test it through exercises or real incident retrospectives, and update it when tools, threats, or processes change. How would you prioritize several simultaneous security tickets while supporting an on-call rotation? I would prioritize based on severity, exploitability, affected systems, data sensitivity, business impact, and whether active compromise is indicated. I would immediately address critical containment needs, communicate status and expected timelines, assign or escalate work where appropriate, and keep lower-risk items tracked with clear follow-up commitments. LivePerson (NASDAQ:LPSN) is a Conversational AI company creating digital experiences that are Curiously Human. Every person is unique, and our technology makes it possible for companies, including leading brands like HSBC, Orange, and GM Financial, to treat their audiences that way at scale. Nearly a billion conversational interactions are powered by our Conversational Cloud each month. You’ll be successful at LivePerson if you are excited to build something from the ground up. You excel by finding daily opportunities to grow at the same pace as the technology we’re building, and you build partnerships that improve our business. Likewise, you’re someone who sees feedback as a chance to learn and grow and believe decisions powered by data are the norm. You care about the wellbeing of others and yourself. You will: • Provide operational support for SecOps tool alerts, triaging, and maintenance. • Work with the SecOps team and other stakeholders to test and uncover vulnerabilities. • Assist with investigating cybersecurity incidents and investigations. • Monitor email and the ticketing system for security-related issues and follow through until they are resolved. • Troubleshoot problems with tools and infrastructure owned by the SecOps team (on-premise and cloud based). • Provide support to the SecOps team with documentation for SOPs, playbooks, and how to walk throughs. • Stay up to date with adversary tactics, techniques, and procedures (TTPs) and general security related events and news. You should be an expert in: • System security engineering or information security engineering. • Building and maintaining both internal and external systems. • Operating system security for all platforms. • Cloud security, networking technologies, and monitoring tools. What You’ll Do: • Be responsible for all areas involving IT and operations infrastructure to ensure effective performance and data confidentiality, integrity and availability. • Be responsible for documenting, monitoring and reporting on various security related systems and processes to ensure system and data integrity, security and availability. • Evaluate and choose the right tools together with the various team(s) to best suit the company’s needs. • Test, maintain and challenge the chosen solutions to comply with securities best practices. • Work closely with the IT and System teams on hardening and configuration management on cloud and infrastructure tools to align with security and regulatory best practices. • Perform analysis of transactional data, log files and/or other system outputs to identify malicious or anomalous activity. • Be available to work in an on-call rotation. You Have: • Hands-on experience with multi-cloud service environments. • Hands-on experience with GCP, Elastic, OKTA, IDM, AD, JAMF and Windows, Linux, MacOS Operating systems. • Experience with responding to security incidents and log analysis. • At least 3 years experience in IT / System teams in a SAAS /Cloud company. • Experience with establishing procedures, reports, SLA’s and escalations. • Ability to work under pressure in dynamic environments. • Excellent interpersonal and effective leadership skills. • Problem-solving skills and ability to work under pressure • Ability to communicate using English (both speaking and writing) Knowledge of Python / Go (big advantage) • Valid CompTia CySA+ Certificate Other Requirements: • Ability to support during US hours • The job requires on-call duty • Excellent interpersonal skills • Strong command of the English language (written and spoken) • Critical thinking skills • Problem solving skills • Attention to detail required • Communications skills necessary (both listening, and speaking) • Ability to prioritize tasks. Why you’ll love working here: Your entrepreneurial spirit will be supported. We love team members who chase down their big ideas, become experts, help colleagues, and own their work. These four company values guide our continued, holistic growth as individuals, as teams, and as a global organization. And to further make our point, let’s just say we’re very proud to be on Fast Company’s list of Most Innovative Companies and Newsweek’s list of most-loved workplaces. At LivePerson, the option to work remotely has helped shape who we are today: a collective of innovators and industry leaders working toward the same vision without ego. While we maintain hubs in NY and Seattle as well as WeWork locations across the globe, our employees choose the environments that work best for them from anywhere in North America. Belonging at LivePerson At LivePerson, people from diverse backgrounds come together to make an impact and be their authentic selves. One way we share and connect is through our employee resource groups such as: Live In Color, LP Proud, and Women In Tech. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local law. We are committed to the accessibility needs of applicants and employees. We provide reasonable accommodations to job applicants with physical or mental disabilities. Applicants with a disability who require a reasonable accommodation for any par of the application or hiring process should inform their recruiting contact upon initial connection. Benefits: * Health: medical, dental, and vision * Time away: 28 vacation days * Development: Generous tuition reimbursement and access to internal professional development resources. * Additional: Food Vouchers. * #LI-Remote Why you’ll love working here: As leaders in enterprise customer conversations, we celebrate diversity, empowering our team to forge impactful conversations globally. LivePerson is a place where uniqueness is embraced, growth is constant, and everyone is empowered to create their own success. And, we’re very proud to have earned recognition from Fast Company, Newsweek, and BuiltIn for being a top innovative, beloved, and remote-friendly workplace. Belonging at LivePerson: We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local law. We are committed to the accessibility needs of applicants and employees. We provide reasonable accommodations to job applicants with physical or mental disabilities. Applicants with a disability who require reasonable accommodation for any part of the application or hiring process should inform their recruiting contact upon initial connection. The talent acquisition team at LivePerson has recently been notified of a phishing scam targeting candidates applying for our open roles. Scammers have been posing as hiring managers and recruiters in an effort to access candidates’ personal and financial information. This phishing scam is not isolated to only LivePerson and has been documented in news articles and media outlets.Please note that any communication from our hiring teams at LivePerson regarding a job opportunity will only be made by a LivePerson employee with an @[liveperson.com](http://liveperson.com/) email address. LivePerson does not ask for personal or financial information as part of our interview process, including but not limited to your social security number, online account passwords, credit card numbers, passport information and other related banking information. If you have any questions and or concerns, please feel free to contact [recruiting-lp@liveperson.com](mailto:recruiting-lp@liveperson.com) Show more [Apply now >](https://jobicy.com/jobs/153310-secops-engineer-i.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. Matched by job category10 related opportunities[Cybersecurity](https://jobicy.com/categories/cybersecurity.md) [Browse all jobs](https://jobicy.com/jobs.md) * ![UpGuard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/474a12c7-221.png) UpGuard Sep 14 ### [Chief Information Security Officer](https://jobicy.com/jobs/153270-chief-information-security-officer-2.md) Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk… * ![BetterHelp logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/0b48fde8-221.jpeg) BetterHelp Sep 13 ### [Head of Security Engineering](https://jobicy.com/jobs/153174-head-of-security-engineering.md) Who are we and why should you join us? BetterHelp is on a mission to remove the traditional barriers to therapy and make mental health care more accessible to everyone…. * ![Deloitte logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/370c2482dacb3fffbd4043cfca5674fe.png) Deloitte Sep 13 ### [Manager, Cyber Compliance, Deloitte Global Technology](https://jobicy.com/jobs/150563-manager-cyber-compliance-deloitte-global-technology.md) Job Type: Permanent Work Model: Remote Reference code: 134501 Primary Location: Toronto, ON All Available Locations: Toronto, ON Our Purpose At Deloitte, our Purpose is to make an impact that matters. We exist to inspire… * ![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png) 1Password Sep 12 ### [Manager, Security Incident Response](https://jobicy.com/jobs/153123-manager-security-incident-response.md) 1Password is growing. We’ve surpassed $400M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up… * ![Sporty Group logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8e6c246a-221.png) Sporty Group Sep 12 ### [Offensive Security Engineer](https://jobicy.com/jobs/149060-offensive-security-engineer.md) About the roleMission Strengthen Sporty’s offensive security posture by proactively testing and identifying vulnerabilities across our external perimeter, standalone virtual private servers (VPS), physical office infrastructure, and endpoint defenses. The… * ![Rithum logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/fe3986d8-221-1.jpeg) Rithum Sep 12 ### [Staff Information Security Engineer – AI First](https://jobicy.com/jobs/153112-staff-information-security-engineer-ai-first.md) Rithum™ is the world’s most trusted commerce network, accelerating how brands, suppliers, and retailers work together to deliver seamless e-commerce experiences. We provide an unmatched platform for brands and retailers,… * ![Liftoff logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/c47aea9f-221.png) Liftoff Sep 12 ### [Security Engineer, Detection & Response](https://jobicy.com/jobs/153102-security-engineer-detection-response.md) Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize… * ![Stripe logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/WRILS-201011073943-272457.png) Stripe Sep 11 ### [Abuse Research Engineer](https://jobicy.com/jobs/153053-abuse-research-engineer.md) Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow… * ![Luna Physical Therapy logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/07/fcb34e841928-221.webp) Luna Physical Therapy Sep 11 ### [Director , Information Security and IT](https://jobicy.com/jobs/153041-director-information-security-and-it.md) Luna is seeking a Director of Information Security & IT to lead the strategy, execution, and continuous evolution of the company’s enterprise technology and information security programs. Reporting to the… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Sep 10 ### [Blockchain Security Expert Intern – AI Track](https://jobicy.com/jobs/152979-blockchain-security-expert-intern-ai-track.md) About the Company Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain…