Junior Operations Engineer Jobs Near Me

Every career journey is personal. That's why we empower you with the tools and support to create your own success story. Be challenged. Be heard. Be valued. Be you ... be here.

Job Summary

The Senior Cyber Security Engineer will independently design, implement, and operate security capabilities across cyber engineering, IAM, and cyber defense including controls that support secure products, platforms, and client integrations. This role will lead complex operational work, mentor junior engineers, and drive execution of security initiatives with minimal oversight.
The Senior Cybersecurity Operations Engineer - AI serves as a senior technical leader within the Cybersecurity Operations Center, focused on advancing detection engineering, automated response, and threat intelligence capabilities to defend critical information assets. This role is responsible for designing, developing, and continuously improving high-fidelity detections across enterprise telemetry, as well as engineering automated response workflows that reduce response times and operational burden.
Building on a strong foundation in security engineering, this individual will champion modern CSOC practices including detection-as-code, threat-informed defense, and the integration of AI and agentic workflows to optimize alert triage, enrichment, and incident response. The Sr. Engineer partners closely with cross-functional teams across infrastructure, cloud, identity, and application domains to ensure visibility, coverage, and coordinated response to evolving threats.
As a subject matter expert, this role drives innovation in CSOC operations, translates threat intelligence into actionable detections and hunts, and continuously measures and improves detection effectiveness. The position also serves as a mentor to junior engineers and analysts, fostering technical growth and promoting scalable, repeatable security operations processes

Essential Job Functions

• Design, implement, and operate security engineering solutions aligned to enterprise standards, architecture patterns, and risk management objectives including emerging cybersecurity and technology trends. - (25%)
• Lead analysis and response for complex security events and incidents, including investigation, containment, remediation, and postincident improvements. - (20%)
• Implement and evolve secure architecture patterns across cloud, identity, and cyber defense capabilities to support scalable and resilient environments. - (15%)
• Partner with Product and Technology teams to identify, assess, and mitigate security risks impacting products, platforms, and clientfacing systems. - (15%)
• Provide security input into product features, integrations, and release readiness activities to support secure delivery and ongoing operations. - (10%)
• Evaluate emerging threats, vulnerabilities, and technologies to inform security enhancements, tooling improvements, and engineering priorities. - (5%)
• Represent security engineering in crossfunctional design, architecture, and governance discussions to support informed technical decisions. - (5%)
• Mentor junior engineers and contribute to documentation, standards, and continuous improvement initiatives within the Cyber Security team. - (5%)

Minimum Qualifications

• Bachelor's Degree in Computer Science, Networking, Information Technology or related field of study or equivalent, relevant work experience
• 5-8 years of experience in cybersecurity, security operations (SOC), IAM, PAM, cyber defense, or a related technical role.
• Demonstrated hands-on experience designing, implementing, and maintaining security solutions, including logging and monitoring, endpoint protection, vulnerability management, identity and access controls, and incident response capabilities and cloud environments.

Preferred Qualifications

• Master's Degree in Computer Science, Networking or Information Technology or related field of study or equivalent, relevant work experience
• Possession of industry-recognized certifications such as CISSP, CISM, CCSP, and/or cloud security certifications (e.g., AWS Certified Security).
• 8-10 years of experience in cybersecurity, security operations (SOC), IAM, PAM, cyber defense, or a related technical role.
• .Hands-on experience building and maintaining detections in one or more SIEM platforms (Splunk, CrowdStrike Next-Gen SIEM, Palo Alto XSIAM)
• Proven experience onboarding and normalizing logs across endpoint, identity, cloud, network, and application sources.Experience managing detections using Git-based workflows, code review, branching strategies, and CI/CD principles.
• Familiarity with testing frameworks for detections (unit testing logic, regression testing, synthetic event generation, and controlled replay).
• 3+ years designing and implementing SOAR playbooks and response automations (Cortex XSOAR, Splunk SOAR).
• Demonstrated success reducing mean time to detect and respond through automation and orchestration.
• Experience translating intelligence into practical outcomes such as detections, hunts, enrichment, and response actions.
• Familiarity with TI platforms and standards (MISP, OpenCTI, STIX/TAXII) and integrating TI into SIEM and SOAR workflows.
• Strong experience mapping detections and response playbooks to MITRE ATT&CK.
• Experience building behavior-based detections that reduce reliance on static indicators.
• Experience applying AI to detection engineering or SOC operations such as alert summarization, triage enrichment, incident clustering, case routing, and knowledge retrieval.
• Experience designing guardrails for AI usage: human-in-the-loop approvals, audit logging, data handling controls, and prompt or workflow governance.

Skills

• Writing high-signal detections using SPL, KQL, EQL, Lucene, Sigma, or equivalent query languages
• Behavior-based detection design, including correlation, baselining, anomaly, and sequence detection
• Alert tuning, suppression, allowlisting, and noise reduction
• Data modeling, normalization, field extraction, parsing, and enrichment strategies
• Detection coverage mapping to MITRE ATT&CK and kill chain concepts

• Building SOAR playbooks and automated response actions with approval gates and safe failure modes
• Integrations via REST APIs, webhooks, message queues, and event-driven designs
• Case management, ticketing integration, and automated evidence collection
• Automated containment actions: disable accounts, revoke sessions, isolate endpoints, block indicators, quarantine email, update firewall rules

• Converting TI into actionable detections, hunts, enrichment, and prioritized response steps
• IOC lifecycle management, confidence scoring, and expiration handling
• Familiarity with STIX/TAXII, MISP, OpenCTI, and TI feeds
• Threat hunting methodologies, hypothesis-driven hunting, and translating hunts into detections

• Designing AI-assisted workflows for triage, summarization, correlation, and recommendation
• Building agentic workflows with human approvals, audit trails, and policy guardrails
• Prompt engineering fundamentals for security workflows and retrieval-augmented approaches
• Evaluating AI outputs for accuracy, bias, and safety, including fallback procedures

• SIEM administration fundamentals and search performance optimization
• Endpoint telemetry and EDR concepts: process trees, persistence, lateral movement, and malware tradecraft
• Identity telemetry: authentication events, conditional access, privilege changes, and OAuth abuse
• Cloud telemetry: audit logs, IAM events, workload signals, and network flow logs

• Scripting and automation using Python and PowerShell
• Infrastructure as code concepts and configuration management practices
• Git, version control, code review, and CI/CD for detection and automation content
• Documentation practices for runbooks, playbooks, and detection intent and testing

• Incident handling and escalation judgment
• Writing clear, analyst-friendly detection documentation and response instructions
• Operational maturity mindset: continuous improvement, post-incident reviews, and backlog prioritization
• Cross-functional collaboration and influencing without authority
  Reports To: Manager and above
  Direct Reports: 0
  Work Environment

• Normal office environment. (Remote or Hybrid), 3 to 4 days per month are required in office if within 60 miles of a posted Bread Financial location.

Travel

• Ability to travel up to 10% annually

Physical and Mental Requirements
To perform this job successfully, an individual must be able to perform each essential job function satisfactorily and meet the physical, mental and work environment requirements. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions, absent undue hardship.

• Communicate/Hearing
• Communicate/Talking
• Stationary Position/Seated
• Typing/Writing
• Maintain focus in high pressure or fast-paced work environment

Other Duties

This job description is illustrative of the types of duties typically performed by this job. It is not intended to be an exhaustive listing of each and every essential function of the job. Because job content may change from time to time, the Company reserves the right to add and/or delete essential functions from this job at any time.

Salary Range (unless otherwise noted below):

$112,400.00 - $179,900.00

Full Salary Range for position:

California: $129,300.00 - $224,900.00 Colorado: $112,400.00 - $197,900.00 New York: $123,600.00 - $224,900.00 Washington: $123,600.00 - $206,900.00 Maryland: $123,600.00 - $197,900.00 Washington DC: $129,300.00 - $206,900.00 Illinois: $112,400.00 - $197,900.00 New Jersey: $129,300.00 - $206,900.00 Vermont: $112,400.00 - $179,900.00 Ohio: $112,400.00 - $179,900.00 Maine: $112,400.00 - $179,900.00 Connecticut: $123,600.00 - $197,900.00 Virginia: $112,400.00 - $179,900.00

The actual base pay within this range may be dependent upon many factors, which may include, but are not limited to, work location, education, experience, and skills.

You must be work authorized in the United States on a full time basis without the need for any sponsorship now or in the future from any employer or organization. The Company cannot offer employment to F-1 (student) visa holders.

Bread Financial offers medical, prescription drug, dental, vision, and other voluntary benefits (including basic and optional life insurance, supplemental medical plans, and short and long-term disability) to eligible associates (regular full-time associates scheduled to work 30 hours per week or more) and their spouses/domestic partners, and child(ren) under the age of 26. New associate elected coverage begins on date of hire (with the exception of disability coverage which has a 6-month waiting period). Six weeks of 100% paid parental leave for eligible parents is available after a 180-day waiting period. Hired associates can immediately enroll in Bread Financial's 401(k) plan.

All associates receive 11 paid holidays. Associates have discretion in managing their time away from work through the Flexible Time Off (FTO) program and may need to notify and receive approval from their manager prior to taking the time off. Associates (except those located in Illinois) receive 80 hours of Paid Sick and Safe Time ("PSST") upon hire and at the beginning of each subsequent calendar year. Illinois associates receive 40 hours of Illinois PSST upon hire and at the beginning of each subsequent calendar year and 40 hours of Illinois Paid Leave upon hire and at the beginning of each subsequent calendar year. Illinois Paid Leave must be used before associates in Illinois will be approved to take FTO.

Hired associates will be able to elect the purchase company stock during offering periods in June and December. You will be eligible for an annual incentive bonus based on individual and company performance.

Click here for more Benefits information.

About Bread Financial

At Bread Financial, you'll have the opportunity to grow your career, give back to your community, and be part of our award-winning culture. We've been consistently recognized as a best place to work nationally and in many markets and we're proud to promote an environment where you feel appreciated, accepted, valued, and fulfilled-both personally and professionally. Bread Financial supports the overall wellness of our associates with a diverse suite of benefits and offers boundless opportunities for career development and non-traditional career progression.

Bread Financial(NYSE: BFH) is a tech-forward financial services company that provides simple, personalized payment, lending and saving solutions to millions of U.S. consumers.Our payment solutions deliver growth for some of the most recognized brands in travel & entertainment, health & beauty, technology, electronics, jewelry, home and specialty apparel through ourco-brand and private label credit cards and pay-over-time products providing choice and value to our shared customers.Additionally, we offer Bread Financial general purpose credit cards and saving products that empower our customers and their passions for a better life.

Bread Financial proudly marks 30 years of success in 2026. To learn more about our global associates, our perform...