Security Operations Engineer

Pax8 is hiring a Security Operations Engineer in the United States to strengthen security across our global cloud marketplace through intelligent detection, decisive response, and practical engineering. This is more than an alert-response role. You'll investigate and mitigate threats, build security tools and detections, improve controls, and help secure how Pax8 develops and uses emerging technology.

Responsibilities

Lead the investigation of security events, from initial detection and technical validation through containment, remediation, and closure; Analyze signals from endpoint, corporate, cloud, managed detection, and other security platforms to determine what matters and what action is needed; Serve as a trusted security resource during local business hours while contributing to the team's incident-response and on-call coverage; Build and improve detections that help Pax8 identify attacks, suspicious activity, fraud, and emerging risks earlier; Create scripts and internal security tools using technologies such as Python and PowerShell, with artificial intelligence supporting rather than replacing sound engineering judgment; Work with information technology, development operations, and engineering teams to identify and resolve threats across Amazon Web Services, Microsoft Azure, and Google Cloud Platform environments; Assess vulnerabilities in context, determine their likely impact, and guide teams toward proportionate remediation; Strengthen vulnerability management through better controls, tooling, prioritization, and cross-functional coordination; Support data loss prevention, insider-risk management, file-exfiltration controls, and wider compliance requirements; Monitor relevant threat intelligence and translate complex developments into clear, useful briefings for internal and external audiences; Help identify and reduce fraud affecting Pax8 and the managed service providers within our partner ecosystem; Share expertise across the global Security Operations team, helping colleagues build capability and respond consistently

Requirements

Substantial cybersecurity experience gained in complex enterprise environments, including work as a senior individual contributor or technical leader; Proven ownership of security incidents from detection through investigation, remediation, stakeholder coordination, and closure; Broad Security Operations knowledge, combined with depth in areas such as incident response, cloud security, threat intelligence, vulnerability management, fraud detection, or data protection; Hands-on experience with Microsoft security technologies such as Defender, Entra, Exchange, and Purview; Practical knowledge of cloud security across Amazon Web Services, Microsoft Azure, or Google Cloud Platform; Experience using cloud security posture management tools such as Wiz or cloud-native security platforms; Demonstrated scripting or development capability using Python, PowerShell, or comparable technologies; The ability to use artificial intelligence tools thoughtfully while understanding, reviewing, and improving the underlying code; Experience partnering effectively with information technology, development operations, engineering, compliance, and business teams; A calm, structured approach to high-pressure or uncertain security situations; The ability to explain risk clearly to people with different technical backgrounds and guide them toward action; Clear written communication skills, including the ability to produce concise security intelligence and incident documentation; A degree in a relevant field, equivalent practical experience, or a combination of both

Nice to have

Cybersecurity certifications such as Certified Information Systems Security Professional; Knowledge of relevant standards and regulations, such as ISO 27001, SOC 2, and applicable data-protection requirements

Benefits

401(k) with Company Match; Medical, Dental & Vision Coverage; Employee Assistance Program (EAP); Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance; Flexible Open PTO; Paid Sick Leave; Paid Parental Leave; RTD EcoPass (eligible Colorado-based employees); Amazing location at the heart of Denver Tech Center; Catered lunch twice a week; Wellness rooms; Games area; Regular social, cultural and networking events