Skip to main content

Développeur(se) principal(e), Opérations de sécurité et intervention en cas d’incident / Senior Security Operations and Incident Response Engineer

Posted today

unity technologiesBrooklyn (NY)

SENIORITY

Lead

Apply (opens in a new tab)

About the role

Overview: In this hands-on Senior SecOps role, you act as the technical lead during Americas hours to drive complex investigations, major incidents, and cross-team security initiatives. You’ll guide analysts, shape detection and automation strategies, and champion AI-assisted workflows at scale. You’ll collaborate with global teams to harmonize standards and priorities, while elevating the SecOps maturity and incident response capabilities. This is a high-impact opportunity to influence security outcomes across Unity’s ecosystem. Compensation / Benefits Comprehensive health, life, and disability insurance Commute subsidy Employee stock ownership Competitive retirement/pension plans Generous vacation and personal days Support for new parents through leave and family-care programs
Responsibilities: Lead and support complex investigations and major incidents from triage to containment, remediation, recovery, and post-incident analysis Serve as the Americas technical escalation point, guiding analysts and engineers and aligning on priorities Design and implement alert enrichment, triage, investigation, containment, case management, and reporting workflows Identify opportunities to leverage automation and AI to reduce manual workload and improve analysis quality Build and tune detections, reduce noise, identify telemetry gaps, and apply lessons from incidents to playbooks Collaborate with technical and non-technical stakeholders, clearly communicate risks and decisions, and drive cross-functional security initiatives
Key requirements: Experience in Security Operations, Incident Response, Detection Engineering, Threat Hunting, or related security role Experience leading or providing senior technical support during complex, high-impact incidents Strong investigative skills with ability to reconstruct attack timelines and correlate data across cloud, identity, endpoint, and corporate environments Hands-on experience with modern SecOps and Incident Response tooling (monitoring, investigation, response, orchestration, automation) Experience building automations or integrations using scripting, APIs, or workflow platforms Strong knowledge of at least one major cloud platform (AWS, GCP, or Azure) Experience mentoring analysts and acting as a technical escalation point Strong judgment and communication under pressure and ability to represent SecOps with senior stakeholders Experience applying AI-assisted tools to investigations, detection, or security workflows is highly valued Mentoring and coaching Effective communication under pressure Collaboration across technical and non-technical stakeholders Detection engineering and alerting workflows Security monitoring, investigation, response, orchestration, and automation platforms Scripting and API-based automation

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this