runbook-development jobs in San Diego

This Data Engineer II role focuses on data operations and infrastructure, supporting the transition of data systems from development to production. The engineer will administer data lakehouse/warehouse platforms (Snowflake, Databricks, Redshift, BigQuery, Azure Synapse), manage RBAC and user governance, monitor and troubleshoot data pipelines, and contribute to data governance and quality best practices.…See more Key responsibilities include orchestration tool administration (Apache Airflow, dbt), observability framework development, incident management, and hands-on SQL and Python work to maintain and optimize production data systems.

Security Operations Analyst role monitoring and triaging alerts across endpoint, cloud, identity, network, and SaaS using enterprise SIEM and XDR platforms. Responsibilities include investigating alerts, performing root-cause analysis, tuning detections, owning initial response for mid-tier incidents, participating in on-call rotation, running targeted threat hunts, and contributing to playbooks and post-incident reviews.…See more Requires 2–5 years of hands-on SecOps, SOC, or incident response experience; proficiency with enterprise SIEM query languages, EDR tooling, and scripting in Python/PowerShell/Bash; and solid understanding of MITRE ATT&CK and network fundamentals.

Lead detection operations, incident response, and security operations maturation for a growing security team. Operate SIEM/XDR across endpoint, cloud, identity, network, and SaaS telemetry; conduct complex investigations; tune detections; and drive root-cause analysis and post-incident improvements.…See more Require 6+ years of hands-on security operations, detection engineering, or incident response experience with deep proficiency in SIEM/XDR query languages, EDR platforms, scripting (Python, PowerShell, Bash), and MITRE ATT&CK framework application. Mentor analysts, define playbooks and runbooks, lead threat hunts, and own SecOps metrics and operational-readiness reporting.

Lead operational service delivery for enterprise Web Application Firewall (WAF), load balancing, DNS, certificates, and edge security platforms. Own end-to-end service performance, SLA/KPI metrics, incident escalation, and cross-team coordination across application, cloud, networking, and security teams.…See more Manage and develop senior and staff-level engineers, drive operational governance, risk management, and continuous improvement. The role requires sufficient technical depth to guide platform designs, direct incident response, and make informed operational decisions, though not necessarily performing all configurations personally.