Security Operations Engineer

Posted Yesterday
Be an Early Applicant
2 Locations
In-Office or Remote
141K-229K Annually
Senior level
Consumer Web • eCommerce • Machine Learning • Software • Sports • Analytics
Helping collectors to pursue their passion.
The Role
The Security Operations Engineer will build and manage cloud and enterprise security detections, lead incident response and threat hunting, automate security operations with SOAR playbooks, and maintain security telemetry pipelines. The role also involves vulnerability remediation, cloud architecture security reviews, cross-functional collaboration, on-call participation, and continuous improvement of runbooks and alert quality. Candidates need strong AWS security, SIEM, incident response, detection engineering, scripting, attacker tradecraft, and compliance framework experience.
Summary Generated by Built In

Collectors is the leading creator of innovative technology that provides value-added services for collectors worldwide. We grade, authenticate, vault, and sell millions of record-setting collectibles, all while modernizing and digitalizing the process to further our mission of helping collectors pursue their passions. We’re always on the lookout for talented people to join our growing team.


Our services span collectible trading cards, autographs, comic books, coins, video games, event tickets, and memorabilia. Our subsidiaries include PSA, PCGS, Beckett, SGC, and Card Ladder.


Since our founding in 1986, we have graded and authenticated millions of items. We employ more than 3000 people across our headquarters in Santa Ana, California and offices in New Jersey, Texas, Florida, Japan, Shanghai, Hong Kong, Canada, Mexico, Germany, the UK, and France.


As part of our interview process, we request that candidates have their cameras on during video interviews. This helps foster meaningful conversation and allows us to create an experience that closely resembles our standard working environment. Certain interview steps may take place by phone. For remote roles, and at our discretion, candidates may be asked to participate in an on-site interview as part of the final stages of the process.


We understand there may be occasional circumstances requiring accommodation and are happy to discuss them as needed. Your recruiter will be able to clarify expectations and answer any questions you have.


We’re transforming the collecting experience with technology that brings authentication, grading, and trading into the modern era. Our products are equalizing the playing field by providing tools that make complex research analytics — including pricing, scarcity reports, and historic sales data — accessible to every collector, old or new. Our engineering mission is to democratize technology while promoting innovation, collaboration, and continuous learning throughout the organization. We're seeking engineers to utilize advanced technology in agile settings, with a focus on improving the customer experience for every collector.


Collectors Cybersecurity team is committed to utilize cybersecurity, risk and privacy best practices on our platforms, leveraging signal intelligence and observability at scale to protect our customers, employees and our brand.


We’re looking for a Security Operations Engineer to join our Cybersecurity team to partner with the broader Product and Tech org and drive secure by default architectures and ensure the security and integrity of our infrastructure.

 

You’ll join our Cybersecurity Team and work from our Santa Ana, CA office. Remote or hybrid candidates will also be considered. We believe that there is significant value in in-person collaboration. If you live within a 1 hour commuting distance to one of our offices, you will be required to be onsite most of the time. This will be discussed further as part of the recruiting process.


What You’ll Do:


  • Drive Detection Engineering: Build, tune and manage high-confidence detections across cloud platforms (AWS/GCP), enterprise tooling (Okta, GWS, M365) and vendor products. Treat detections as code: version controlled, peer reviewed, tested in CI, and measured for precision and coverage against MITRE ATT&CK.
  • Incident Command and Containment: Serve as a senior responder for security incidents, driving triage, containment, forensics, and remediation, and authoring post-incident reviews that turn lessons into durable improvements.
  • Threat Hunting: Conduct proactive threat hunts across cloud, SaaS, identity and on-prem infrastructure, converting hypotheses and findings into new detections and hardened controls.
  • Tooling and Response Automation: Design and build automation and SOAR playbooks that reduce manual toil, accelerate response times, and improve alert enrichment and case management.
  • Security Telemetry: Own and improve the health of the security data pipeline: log source onboarding, parser and schema quality, coverage gap analysis, and data quality for data sources across our cloud, SaaS and on-prem environment.
  • Automated Analysis and Secure Frameworks: Scale security efforts by integrating automation for the identification, prioritization, and remediation of vulnerabilities 
  • Partner cross-functionally with infrastructure, platform, and engineering teams to embed security operations requirements into new services and cloud architecture decisions.
  • Lead by example and be a champion of all company policies, including safety, attendance & security
  • Participate in a shared on-call rotation, and continuously improve runbooks, escalation paths, and alert quality to make on-call sustainable for the whole team.

Who You Are:


  • 5+ years in security operations, incident response, or detection engineering, with at least 2 years operating in a cloud-native environment at a senior level.
  • Deep hands-on experience securing AWS at scale (IAM, CloudTrail, GuardDuty, Security Hub, EC2/EKS/Lambda) in a multi-account organization; familiarity with GCP or Azure is a plus.
  • Strong SIEM proficiency - you've built and tuned detections, written complex queries, and managed log pipelines, not just consumed alerts.
  • Proficiency in one or more general purpose programming/script languages, preferably Python, and comfortable building automation, integrations, and SOAR playbooks from scratch.
  • A seasoned incident responder who stays calm under pressure, communicates clearly with technical and executive audiences, and leads without needing formal authority.
  • Grounded in attacker tradecraft - you think in terms of MITRE ATT&CK, understand cloud-specific attack paths, and use that lens to prioritize work.
  • Experienced working across team boundaries: influencing engineering roadmaps, negotiating with vendors, and representing security operations in cross-functional forums.
  • Pragmatic and outcome-driven - you balance ideal security posture against operational reality and know when good enough today beats perfect next quarter.
  • Excellent problem-solving skills, with the ability to work independently and handle multiple tasks
  • Familiarity with major compliance frameworks, such as PCI, NIST, ISO, SOX, and experience assisting in audits

Salary Range: The salary range for this position is $140,971- $228,870. Actual compensation on this range varies based on a variety of non-discriminatory factors, including location, job level, experience, and skill set. This role may be eligible for bonuses, commissions, or other forms of compensation, please ask your recruiter for details.


Reasons To Join Us:

  • Health Insurance: All full-time employees are eligible to enroll in Medical, Dental, and Vision
  • Additional Benefits: Full-time employees are eligible for fertility, commuter, and educational assistance benefits.
  • 401(K) Matching Plan: We are proud to offer a competitive 401k matching plan to our employees to support their future financial goals
  • Vacation: All salaried employees are eligible for flexible time-off.
  • Holiday Pay: All regular, full-time employees are eligible for ten company paid holidays
  • Employee Discounts: Employees receive discounts on select grading services for approved submissions
  • Flexible Hours: Many of our teams offer flexible schedules with varying shifts and will work with you to accommodate your needs
  • Fun Working Environment: Our team members are invited to participate in celebrations, holiday events, and team building activities.
  • Additional Resources from our technology team: Collectors Tech Blog 

Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. 

#Li-Remote

#Bi-Remote

Candidates must be authorized to work in the United States.


Collectors uses e-Verify to validate your ability to work legally in the United States.


We are aware that there are instances where individuals are receiving job offers that fraudulently allege to be from Collectors or one of our business units. This type of fraud can be carried out through false websites, through fake e-mails claiming to be from the company or through social media. We never ask for personal information such as your bank account, Social Security numbers or National IDs, nor do we send or request payments for the purchase of business-related equipment. If you suspect fraud, please reach out to [email protected].


We are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, veteran status, or other class protected by applicable law. We believe that a team that represents a variety of backgrounds, perspectives, and skills will better service the diverse community of collectors we support.


If you require an accommodation to apply or interview with us due to a disability or special need, please email [email protected].


U.S. residents: for disclosures relating to personal information we collect during the employment application and recruitment process, please see our Privacy Notice for U.S. Applicants.


For New York Residents: In connection with hiring, Collectors Universe, Inc. uses an automated employment decision tool (Brighthire) to assist in evaluating candidates. Collectors Universe, Inc. began using this tool in September 2026.  In accordance with NYC Local Law 144, a summary of the most recent independent bias audit of this tool is available from Brighthire . To request information about the type of data collected, its source, and our data retention policy, contact [email protected].



Skills Required

  • 5+ years of experience in security operations, incident response, or detection engineering
  • At least 2 years operating in a cloud-native environment at a senior level
  • Hands-on experience securing AWS at scale, including IAM, CloudTrail, GuardDuty, Security Hub, EC2, EKS, and Lambda
  • Familiarity with GCP or Azure
  • Strong SIEM proficiency, including building and tuning detections, writing complex queries, and managing log pipelines
  • Proficiency in one or more general-purpose programming or scripting languages, preferably Python
  • Experience building automation, integrations, and SOAR playbooks
  • Incident response experience with clear communication to technical and executive audiences
  • Knowledge of MITRE ATT&CK, attacker tradecraft, and cloud-specific attack paths
  • Experience influencing engineering roadmaps, negotiating with vendors, and working cross-functionally
  • Excellent problem-solving skills and ability to work independently and handle multiple tasks
  • Familiarity with PCI, NIST, ISO, and SOX compliance frameworks and experience assisting in audits
  • Authorization to work in the United States

What the Team is Saying

Titapha
Ted
Mark
Jessy
Sun
Mike
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Santa Ana, CA
2,246 Employees
Year Founded: 1986

What We Do

Collectors has multiple business lines that grade, authenticate, and sell millions of high-value, record-setting collectibles. We're the leader in third-party authentication and grading services for high-value collectibles including trading cards (Professional Sports Authenticator and Card Ladder), coins (Professional Coin Grading Services), video games (Wata), event tickets, autographs, and memorabilia, and with your help we can continue to grow rapidly. Our goal is to make the joy of collecting accessible to everyone - collectors looking to complete their set, inventors looking to maximize the value of their collection, and anyone who’s looking to preserve a game, card or coin that reminds them of fond memories in their lives. We’re entering an exciting new stage of growth as a result of our acquisition in 2021 led by entrepreneur and sports card collector Nat Turner, D1 Capital Partners L.P., and Cohen Private Ventures, in addition to renowned athletes and collectors. We’re investing in scalable, modern infrastructure to support the maturation of the industry, increasing value of collectibles, and demand for our services. Help us build a tech-enabled business for collectors. Our services span collectible coins, trading cards, video games, event tickets, autographs, and memorabilia through our subsidiaries, which include Professional Sports Authenticators (PSA), Professional Coin Grading Services (PCGS), Wata, Certified Coin Exchange (CCE), Collectors Corner, Set Registry, Collectors.com, and the Long Beach Expo collectibles trade show. Since our founding in 1986, we have graded and authenticated more than 80 million items. We employ over 1,000 people across our Santa Ana, CA headquarters, New Jersey, Seattle Hong Kong, Paris, Shanghai and Tokyo.

Why Work With Us

Collectors has long been the global leader in third-party authentication, grading, and valuation services for collectibles. This gives us the chance to disrupt the industry by applying technological advances to our services. We strive to be the most innovative organization in collectibles, building an ecosystem that celebrates the joy of collecting

Gallery

Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery

Collectors Offices

Hybrid Workspace

Employees engage in a combination of remote and on-site work.

Typical time on-site: Flexible
HQSanta Ana, CA
Company Office Image
Guadalajara, Jalisco
Jersey City, NJ
Mississauga, ON
Monheim am Rhein, DE
Plano, Texas
Shanghai, China
Tokyo, JP
Learn more

Similar Jobs

Collectors Logo Collectors

Customer Relations Representative III, PSA

Consumer Web • eCommerce • Machine Learning • Software • Sports • Analytics
Remote
CA, USA
2246 Employees
24-24 Hourly

Collectors Logo Collectors

Senior Manager, Marketplace Demand

Consumer Web • eCommerce • Machine Learning • Software • Sports • Analytics
Remote or Hybrid
Santa Ana, CA, USA
2246 Employees
140K-185K Annually

Collectors Logo Collectors

Director, Corporate Communications

Consumer Web • eCommerce • Machine Learning • Software • Sports • Analytics
Remote
California, USA
2246 Employees
163K-267K Annually

Collectors Logo Collectors

Analytics Manager

Consumer Web • eCommerce • Machine Learning • Software • Sports • Analytics
Remote or Hybrid
California, USA
2246 Employees
106K-171K Annually

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account