SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 145,000 - 170,000 / annual
CLEAR is building a secure identity platform transforming how people live, work, and travel. The company serves 43+ million members globally and partners across airports, stadiums, and everyday experiences.
You will lead complex security investigations across corporate networks, endpoints, data centers, and cloud environments, driving incidents from initial analysis through escalation and remediation. You'll develop, tune, and optimize threat detection logic across SIEM, EDR, and other security platforms, proactively identifying coverage gaps, reducing false positives, and improving alert fidelity.
Key responsibilities include partnering with Engineering and Infrastructure teams to investigate threats and drive security improvements; applying threat intelligence, data, automation, and AI-enabled tools to identify emerging attack patterns and accelerate investigations; serving as a subject matter expert and escalation point for other analysts, mentoring junior team members, and establishing scalable processes and playbooks; continuously evaluating detection coverage against evolving threats and frameworks like MITRE ATT&CK; leading improvements to Security Operations workflows, procedures, and tooling; communicating technical findings and risk to both technical and non-technical stakeholders; and participating in on-call rotation for critical security events outside standard hours.
Success is measured by high-quality investigations leading to timely containment and remediation, measurable improvements in SOC workflows and detection logic, increased team capability through mentorship and documentation, and improved detection coverage and response times.
REQUIREMENTS:
- 8+ years of cybersecurity experience, including 5+ years in security operations, threat detection, incident response, or related discipline
- Deep knowledge of SIEM, EDR, and security monitoring technologies with demonstrated experience investigating complex events and developing/tuning detection logic
- Ability to apply threat intelligence and frameworks (MITRE ATT&CK, NIST CSF, ISO 27001) to identify adversary behavior and evaluate detection coverage
- Proficiency using data, automation, scripting, and AI-enabled security tools to improve workflows while applying strong analytical judgment
- Ability to solve complex security problems independently, communicate findings clearly, build cross-functional relationships, and mentor analysts
- Certifications such as GCIH, GCIA, or OSCP are a plus
- Experience working across teams and functions to deliver strategic, program-level goals
