Security Operations Engineer (SecOps)

We run Crown Coins, a high-traffic social gaming platform on AWS and GCP.

You'll join the Platform team and own day-to-day security across our cloud, identity, edge and endpoints. You'll automate that work with AI, and work with engineering to stop bot abuse and fraud before it costs us money.

Responsibilities

• Cloud security (AWS + GCP): Enforce least-privilege IAM and org guardrails (SCPs and GCP org policies). Monitor and triage cloud security findings and audit logs. Harden our EKS clusters.
• Identity and access: Run JumpCloud and Google Workspace as our identity layer: SSO, MFA, access reviews and device policies.
• Edge protection: Own Cloudflare WAF, bot management, rate limiting and Zero Trust Access. Tune rules against signup bots, credential stuffing and abuse.
• Browser and endpoint security: Manage Island Enterprise Browser policies, including DLP, data boundaries and access to sensitive admin tools.
• Detection and response: Build alerts and write runbooks. Lead security incidents alongside SRE on-call, and follow through on post-incident fixes.
• AI agents that triage security alerts, enrich them with context and suggest or apply a response

Requirements

• 2+ years in SecOps, cloud security, or SRE/DevOps with a strong security focus
• Hands-on experience with AWS IAM and AWS security services, plus working knowledge of GCP
• Admin experience with an identity provider (JumpCloud, Okta or Google Workspace), including SAML/OIDC SSO, MFA and SCIM
• Experience with Cloudflare (WAF, rules, Zero Trust) or a comparable edge security platform
• Terraform, Git and Python, plus hands-on experience building automation with LLMs or AI agents (such as Claude, OpenAI or MCP-based tools)
  
  Nice to have
• Google Cloud Professional Cloud Architect certification
• Island or another enterprise browser, or MDM tools
• Kubernetes/EKS security: RBAC, network policies and image scanning
• Fighting bots or fraud in gaming, fintech or e-commerce
• SIEM or detection engineering experience
• Other certifications such as AWS Security Specialty, Security+ or CCSK