SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Gruve is a Series A agentic AI startup transforming enterprises into AI powerhouses through cybersecurity, customer experience, cloud infrastructure, and advanced technologies like LLMs. This Senior Infrastructure Security Engineer role is a critical L2 position within the security operations function, responsible for leading major incident technical response until L3 command engagement and owning the detection-content and tuning program day-to-day.
Key responsibilities include leading technical response on major security and infrastructure incidents, managing the detection-content backlog and tuning program execution with the L3 lead, approving and executing high-risk changes, and running problem management to eliminate recurring incidents. You will own log-pipeline integration health across collectors, GCP Pub/Sub feeds, and custom sources (Redfish listener, Aravolta webhooks, Hubble exporter) with escalation into engineering. Additional duties include cross-training the L1 bench across towers, deputizing for the L3 lead, driving shift-quality audits, and conducting post-incident reviews.
Required qualifications: 8–11 years of experience with prior senior/lead experience in SOC or NOC environments with genuine cross-domain fluency. You must demonstrate incident command capability, deep SIEM content and query skills, advanced network troubleshooting expertise, and an automation mindset.
Desirable qualifications include certifications such as GCIH/GCIA, JNCIP, or CCIE written; MSSP/managed-services background; and exposure to AI-SOC tooling.
Gruve fosters a culture of innovation, collaboration, and continuous learning with commitment to building a diverse and inclusive workplace.
