Senior Security Operations Analyst at Extend

This role is ideal for a mid-to-senior level Security Operations professional with a strong foundation in cloud-native environments. You should have at least 3

Work type: remote

Location: Remote, US

Salary: $157,000 – $182,000/yr

Type: Full-time

Summary

This role is ideal for a mid-to-senior level Security Operations professional with a strong foundation in cloud-native environments. You should have at least 3 years of experience, specifically within the AWS ecosystem, and a background in detection engineering. This isn't just a "monitor and alert" role; it requires a builder mindset—someone comfortable with Infrastructure as Code (Terraform/CloudFormation) and serverless architectures. The position offers a highly competitive salary range ($157k - $182k) for a fully remote US-based role. Outside of the base pay, the package includes startup equity, comprehensive benefits, and a flexible PTO policy. Tech-wise, you’ll get to work with a modern stack including Wiz, SentinelOne, and AWS Bedrock, focusing on the emerging security landscape of AI and agentic workflows. **You might be a good fit if you...** * Have deep experience securing AWS serverless environments (Lambda, S3, DynamoDB) and using IaC. * Are skilled at modeling attacker behaviors (MITRE ATT&CK) and writing custom detections as code. * Want to bridge the gap between technical threat hunting and GRC/audit initiatives (SOC 2, NIST). * Are curious about AI security and have experience with AWS Bedrock or similar AI frameworks.

Job Description

About Extend:

Extend is revolutionizing the post-purchase experience for retailers and their customers by providing merchants with AI-driven solutions that enhance customer satisfaction and drive revenue growth. Our comprehensive platform offers automated customer service handling, seamless returns/exchange management, end-to-end automated fulfillment, and product protection and shipping protection alongside Extend's best-in-class fraud detection. By integrating leading-edge technology with exceptional customer service, Extend empowers businesses to build trust and loyalty among consumers while reducing costs and increasing profits.

Today, Extend works with more than 1,000 leading merchant partners across industries, including fashion/apparel, cosmetics, furniture, jewelry, consumer electronics, auto parts, sports and fitness, and much more. Extend is backed by some of the most prominent technology investors in the industry, and our headquarters is in downtown San Francisco.

What You'll Do:

• Serve as a core member of Security Operations, monitoring and triaging alerts from platforms such as SentinelOne and Wiz. Perform end-to-end investigations to identify, contain, and remediate threats and incidents, driving timely, appropriate response.

• Proactively identify and assess vulnerabilities in infrastructure and code, working with development and other cross functional teams to address issues.

• Contribute to the end-to-end detection lifecycle: model attacker behaviors (MITRE ATT&CK), write and test detections as code across security programs and tooling (SentinelOne, Wiz, Okta, AWS CloudTrail), and continuously enrich to reduce false positives and improve MTTD. Support data quality and telemetry onboarding, maintain response playbooks, and provide threat validation assistance across the business.

• Assist teams with the application of secure configuration baselines and best practices in accordance with CIS Benchmarks, NIST, vendor hardening guides, and applicable compliance standards across all company computing assets.

• Correlate endpoint and infrastructure telemetry to identify emerging threats. Curate and operationalize intelligence (IOCs, TTPs) into detections and response playbooks, and maintain vetted intelligence feeds.

• Assist GRC initiatives by mapping controls to internal policies and frameworks (e.g., SOC 2, NIST CSF, NYC DFS 500), identifying gaps, supporting audits and evidence collection, tracking remediation, and maintaining policies and control documentation.

• Work with engineering and business teams to champion security best practices, communicate risks to accountable owners, and assist with mitigation planning and execution.

• 3+ years experience in a Security Analyst / Security Operations role

• 3+ years experience with AWS CloudFormation, or other infrastructure-as-code systems (like Terraform)

• 3+ years experience or certification in AWS serverless technologies (API Gateway, Lambda, S3, DynamoDB)

• Certifications (one or more preferred): CISSP, CCSP, GIAC (GCIH/GCIA/GMON/GCED/GCFA/GREM), cloud security (AWS or cloud agnostic security specialty) or equivalent experience.

• Proficiency with hands on management and use of SIEM, CNAPP, EDR, Vulnerability Management tooling, and Detection Engineering strategies.

• Proficiency with AI technologies and the corresponding threat landscape and strategies for mitigation. Understands agentic workflows such as AWS Bedrock, MCP based workflows (or similar technologies)

• Working Knowledge of best practices around security roles and responsibilities for AWS IAM

• Experience working with observability services and tooling (including Coralogix, CloudWatch, OpenTelemetry)

• Ability to perform in a high energy environment with dynamic job responsibilities and priorities

• Experience with AWS Cloud Development Kit(CDK)

• Experience with Mastra AI

Life at Extend:

• Working with a great team from diverse backgrounds in a collaborative and supportive environment.

• Competitive salary based on experience, with full medical and dental & vision benefits.

• Stock in an early-stage startup growing quickly.

• Generous, flexible paid time off policy.

• 401(k) with Financial Guidance from Morgan Stanley.

View this job on nocollar jobs