Senior Security Operations Engineer

About Life360

Life360’s mission is to keep people close to the ones they love. Our category-leading mobile app and Tile tracking devices empower members to protect the people, pets, and things they care about most with a range of services, including location sharing, safe driver reports, and crash detection with emergency dispatch. Life360 serves approximately 88 million monthly active users (MAU), as of June 2025 across more than 180 countries.  

Life360 delivers peace of mind and enhances everyday family life with seamless coordination for all the moments that matter, big and small. By continuing to innovate and deliver for our customers, we have become a household name and the must-have mobile-based membership for families (and those friends that basically are family).

Life360 has more than 500 (and growing!) remote-first employees. For more information, please visit life360.com.

Life360 is a Remote First company, which means a remote work environment will be the primary experience for all employees. All positions, unless otherwise specified, can be performed remotely (within the US) regardless of any specified location above. 

About the Job

We are seeking a Senior Security Operations Engineer to strengthen security operations capabilities and reduce risk across our environment. This role will focus on detection engineering, triaging cloud security posture alerts, and building automation to improve the speed and fidelity of our response. The ideal candidate will bring strong AWS expertise, 24x7 monitoring, scripting and automation skills, and experience with SIEM/XDR and cloud monitoring tools, working in close partnership with engineering teams. With a purple team mindset, this person will help bridge gaps between offensive insights and defensive controls to continually enhance our security posture.

The US-based salary range for this position is $123,000 to $180,500. We take into consideration an individual's background and experience in determining final salary - therefore, base pay offered may vary considerably depending on geographic location, job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits, as well as equity.

What You’ll Do

• Lead and coordinate threat detection & incident response efforts, including maintaining and refining security playbooks and response processes.
• Develop and maintain detection engineering content across SIEM, XDR, and cloud-native logging systems (AWS CloudTrail, K8s, Wiz, PAM, etc.).
• Triage and manage alerts from cloud security posture management and monitoring platforms, ensuring efficient workflows and accurate escalations.
• Oversee and enhance logging pipelines, SIEM rules, and threat detection coverage to improve fidelity and reduce noise.
• Implement and optimize log management, cloud monitoring, and security automation to improve the efficiency of response.
• Build and maintain automation and orchestration workflows to streamline alert triage and incident response.
• Partner with engineering teams to integrate security visibility into infrastructure, applications, and CI/CD pipelines.
• Participate in the security on-call rotation to respond to and mitigate incidents.
• Collaborate with a purple team mindset, working closely with defenders and offensive security partners to continually improve detection coverage across the organization.
• Continuously evaluate and improve threat detection coverage, alert fidelity, and response automation.

What We’re Looking For

• 5+ years of hands-on security engineering experience (incident response, detection engineering, or SOC engineering).
• Strong experience in AWS environments, including CloudTrail, IAM, and native logging.
• Proficiency with SIEM, EDR/XDR, and cloud security monitoring tools.
• Hands-on scripting and automation skills (Python, SOAR platforms a plus), with an ability to streamline workflows and reduce manual effort.
• Experience building and tuning detections, triaging alerts from cloud security posture management tools.
• Experience working with Cloud Security Posture Management platforms, including triaging alerts, tuning policies, and integrating findings into workflows.
• Understanding of common security threats, vulnerabilities, and mitigations, and the ability to operationalize defenses.
• Familiarity with modern application stacks, CI/CD pipelines, and DevSecOps practices.
• Strong ability to collaborate with engineering teams to incorporate security visibility in ways that enhance, rather than hinder, development.
• A problem-solver mindset, balancing a