SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Loadsmart is a growth-stage logistics technology company valued at over $1 billion, using innovative technology to reinvent freight logistics. The company has headquarters in Chicago with a globally distributed remote team.
As Senior Security Engineer on the Blue Team, you will be the second engineer on a defensive security team, partnering with the existing Blue Team engineer and cross-functional engineering squads to detect threats, respond to incidents, and maintain security and compliance across applications and infrastructure.
Key responsibilities include:
- Leading security incidents end-to-end: triage, containment, eradication, recovery, stakeholder communication, and post-incident review
- Owning and evolving the incident response process, including playbooks, severity models, on-call practices, and tabletop exercises with engineering and IT teams
- Building and tuning detections in Datadog Cloud SIEM across AWS, Kubernetes, and Google Workspace to reduce detection time and alert noise
- Investigating suspicious activity across cloud, identity, and workload logs, collecting and preserving evidence
- Improving cloud security posture, particularly IAM, and translating findings into prioritized work for engineering squads
- Automating detection and response tasks using Python and Terraform
- Reporting on incidents and security posture to engineering leadership and mentoring engineers across squads
Requirements:
- 5+ years of experience in Blue Team, Defensive Security, or Security Operations
- Hands-on experience leading security incident response from detection through post-incident review and action follow-up
- Experience with forensics and evidence handling in cloud environments, including log analysis, evidence collection, and preservation
- Experience building and tuning SIEM detections and alerts (such as Datadog Cloud SIEM) mapped to MITRE ATT&CK, CIS, or NIST frameworks
- Experience securing AWS and Kubernetes, including AWS IAM and SSO permission reviews and remediation
- Ability to automate security tasks with Python and/or Bash, and manage infrastructure as code with Terraform
- Experience defining security processes, leading cross-team initiatives, and mentoring engineers
- Fluent English for daily work with native speakers
