Security Engineer

Role Overview: The Security Engineer strengthens Sumo Logic’s detection capabilities, hardens cloud/IT environments, and builds defensive controls that scale. This role blends engineering with threat-driven design, ensuring we can detect, prevent, and respond to attacker behavior across cloud, endpoint, identity, and SaaS surfaces. The Security Engineer builds meaningful alerts, improves data quality, reduces noise, and creates protections that advance the maturity of the entire security program.

Key Responsibilities
Detection Engineering and Alert Development

• Create, tune, and maintain detections that identify attacker behavior with minimal false positives
• Develop dashboards, correlations, and baseline checks that improve visibility across cloud and endpoint activity.
• Work with SecOps to validate alerts, improve logic, and strengthen incident response workflows.

Cloud and Infrastructure Security

• Harden AWS environments through secure configurations, IAM guardrails, network boundaries, and automated controls.
• Review new architectures and deployments for security gaps.
• Support automation of security checks using cloud native services, serverless functions, or policy engines.

Security Tooling and Log Pipeline Ownership

• Ensure logs from identity, cloud workloads, endpoints, SaaS tools, and infrastructure are ingested cleanly.
• Identify missing data sources, parsing issues, or pipeline gaps.
• Integrate new tools into the detection ecosystem and maintain healthy coverage.

Threat Analysis and Incident Support

• Support escalations by analyzing signals, tracing attacker behavior, and advising on root cause.
• Build automation that accelerates response.
• Contribute to tabletop exercises, threat modeling, and continuous improvement.

Cross Functional Partnership

• Work with Engineering and IT to drive secure patterns, strong IAM decisions, and high-quality logging.
• Support GRC during audits by validating controls and demonstrating security architecture.

Required Experience and Skills:

• Three to five years in Security Engineering, Detection Engineering, or Cloud Security roles.
• Strong technical understanding of AWS security, IAM, network fundamentals, and cloud guardrails.
• Hands-on experience working with SIEM platforms and building detections.
• Solid understanding of attacker behavior and defensive security patterns.

Preferred Experience:

• Experience in SaaS, cloud-native, or high-growth tech environments.
• Hands-on familiarity with containers, Kubernetes, AI security, or automation pipelines.
• Certifications such as AWS Security or similar.

What Success Looks Like:

• Security alerts become higher signal and lower noise.
•  Cloud risks are reduced through intentional guardrails and automation.
•  Tooling and log coverage are reliable, consistent, and complete.
•  SecOps moves faster and more effectively with strong detections and context.
• The company gains measurable improvements in visibility, resilience, and readiness.

Sumo Logic, Inc. helps make the digital world secure, fast, and reliable by unifying critical security and operational data through its Intelligent Operations Platform. Built to address the increasing complexity of modern cybersecurity and cloud operations challenges, we empower digital teams to move from reaction to readiness—combining agentic AI-powered SIEM and log analytics into a single platform to detect, investigate, and resolve modern challenges. Customers around the world rely on Sumo Logic for trusted insights to protect against security threats, ensure reliability, and gain powerful insights into their digital environments. For more information, visit www.sumologic.com.

Sumo Logic Privacy Policy. Employees will be responsible for complying with applicable federal privacy laws and regulations, as well as organizational policies related to data protection.