Security Operations Engineer

As a Security Operations Engineer at Mesh, you design, implement, and operate security controls across our infrastructure, systems, and operational workflows. You combine hands-on technical building with active incident response, working autonomously to strengthen our defensive posture as we enable consumers to pay and be paid with any asset through tokenized infrastructure backed by PayPal Ventures, Paradigm, and Galaxy Ventures.

What you'll do

• Implement security controls and architecture by designing, deploying, and maintaining core defensive systems, security integrations, and infrastructure guardrails
• Perform threat analysis and modeling by evaluating system architectures from an attacker's perspective, identifying key attack surfaces, and building practical defensive mitigations
• Conduct code and system reviews by evaluating new features and integration architectures for security risks, leveraging code comprehension to improve overall security posture
• Manage vulnerability remediation by tracking findings from scans, pentests, and bug reports, prioritizing by risk, and driving fixes to closure with engineering owners
• Own security operations platform management by administering, configuring, and maintaining SIEM/SOAR platforms for threat detection and incident response
• Engineer detection rules and alerts by writing, tuning, and optimizing detection queries to identify real threats while minimizing false positives
• Conduct security investigations and incident response by analyzing alerts, performing forensic analysis, and managing escalation and communication during active incidents
• Document findings by producing clear reports for security reviews, threat models, and incident investigations that support institutional knowledge and audits
• Support compliance and evidence collection by ensuring security events, review findings, and remediation work are properly logged and available for audit and regulatory requirements
• Maintain operational readiness by staying current on emerging threats, attack techniques, and security engineering practices relevant to our infrastructure and threat model

What you bring

• A Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 5-7+ years of hands-on experience building defensive security systems, implementing security controls, or operating in security response environments
• Strong technical background in understanding attack techniques, performing threat analysis, and leading incident response efforts
• Experience managing vulnerability findings from identification through remediation
• Working knowledge of SIEM/SOAR platforms and writing detection rules, such as SPL, KQL, or similar languages
• Deep understanding of network, host, application, and cloud security concepts
• Strong written and verbal communication skills, with the ability to clearly document findings and escalate issues
• Ability to work independently with minimal supervision
• Experience collaborating with small, international teams across multiple time zones
• Willingness to work outside normal business hours when needed for incident response

Nice to have

• Familiarity with threat modeling frameworks such as STRIDE or MITRE ATT&CK
• Experience implementing automated security controls and infrastructure security tooling
• Hands-on experience with SIEM platforms at scale, such as Sumo Logic, Splunk, Azure Sentinel, or Datadog
• Experience with cloud security monitoring across AWS, Azure, or GCP and their native security services
• Exposure to containerized environments such as Docker and Kubernetes, and securing cloud-native workloads
• Familiarity with security and compliance frameworks such as ISO 27001/2, NIST, SOC2, GDPR, or DORA
• Experience with at least one object-oriented programming language, with Python preferred
• Experience with at least one query language such as KQL or similar

What we offer

• Competitive salary and equity
• Comprehensive health coverage for you and your family
• Unlimited PTO
• Dedicated budget for courses, conferences, and certifications
• Remote-friendly approach with hybrid expectations (approximately 40% in-office time for San Francisco, New York, and Bangalore hubs, roughly two days per week)
• Top-tier tools and equipment

About Mesh

Mesh enables consumers to pay and be paid with any asset by making crypto payments reliable, useful, and ubiquitous. The company combines a powerful orchestration engine with a seamless consumer app to unlock liquidity for tokenized assets, backed by leading investors including PayPal Ventures, Paradigm, and Galaxy Ventures.