SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mesh is building infrastructure to enable consumers to pay and be paid with tokenized assets, combining an orchestration engine with a consumer app to unlock liquidity globally. Backed by PayPal Ventures, Paradigm, and Galaxy Ventures, the company is creating the infrastructure for the next era of the global economy.
As a Security Operations Engineer, you will be a hands-on technical builder and responder responsible for designing, implementing, and operating security controls across infrastructure, systems, and operational workflows. Your role spans building robust security architecture, conducting threat modeling, analyzing attack vectors, and driving active incident response.
Key responsibilities include: implementing security controls and defensive systems; performing threat analysis and modeling by evaluating architectures from an attacker's perspective; conducting code and system reviews for security risks; managing vulnerability remediation from identification through closure; administering SIEM/SOAR platforms for threat detection; engineering detection rules and alerts to identify threats while minimizing false positives; conducting security investigations and incident response including forensic analysis; documenting findings for security reviews and audits; supporting compliance and evidence collection; and maintaining operational readiness on emerging threats.
You will work autonomously across engineering, infrastructure, and product teams to strengthen defensive posture and ensure rapid, effective response to security events. The role requires understanding code and participating in security reviews, but primary focus is implementing security systems, detecting threats, and leading response efforts.
Required qualifications: Bachelor's degree in Computer Science, Cybersecurity, or related field; 5–7+ years hands-on experience building defensive security systems, implementing controls, or operating in security response environments; strong technical background in attack techniques, threat analysis, and incident response leadership; experience managing vulnerability findings; working knowledge of SIEM/SOAR platforms and detection rule writing (SPL, KQL, or similar); deep understanding of network, host, application, and cloud security; strong written and verbal communication; ability to work independently in fast-paced environment; experience with international teams across time zones; willingness to work outside normal hours for incident response.
Nice-to-have skills include threat modeling frameworks (STRIDE, MITRE ATT&CK), automated security controls, SIEM platforms at scale (Sumo Logic, Splunk, Azure Sentinel, Datadog), cloud security monitoring (AWS, Azure, GCP), containerized environments (Docker, Kubernetes), security frameworks (ISO 27001/2, NIST, SOC2, GDPR, DORA), object-oriented programming (Python preferred), and query languages (KQL or similar).
