Skip to content

Open nowPosted 2 days ago

Security Operations Engineer II

Credit Acceptance20 open roles

Where
California San Francisco Bay Area Hybrid
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Operations Engineer IICredit Acceptance · California San Francisco Bay Area Hybrid
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Credit Acceptance's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Credit Acceptance postings stay open a median of 6 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 2 days ago

Credit Acceptance median: 6 days open

The posting

At Credit Acceptance, we are building on the foundation of a successful business while investing in the future through technology, data, AI, and continuous improvement. As we continue to evolve, our Team Members play an active role in improving experiences, driving meaningful change, and shaping the future of our business. We foster an environment where people are empowered to contribute ideas, develop their careers, make an impact, and help lead our continued transformation.

Our Engineering teams are helping shape the future of Credit Acceptance through innovation. Team Members collaborate across the organization to solve complex challenges, build impactful solutions, challenge the status quo, and support informed business decisions. We value curiosity, continuous learning, and new ideas from people who are passionate about driving modernization and meaningful business impact.

Outcomes and Activities

Information Security

  • Operate, maintain, and improve enterprise Cyber Defense platforms across endpoint, web, network, monitoring, and automation services.
  • Maintain next-generation SIEM integrations; onboard telemetry and resolve ingestion, parsing, or data-quality issues.
  • Maintain endpoint detection and response capabilities; support investigations and approved containment actions.
  • Manage secure web access policies, inspection controls, and approved exceptions; troubleshoot access and performance issues.
  • Support web application protections with network and application teams; help implement rules, logging, integrations, and approved exceptions.
  • Perform initial triage of cybersecurity alerts and incidents; gather evidence, document findings, determine scope, and escalate as needed.
  • Support approved containment, remediation, and recovery actions across enterprise and cloud environments.
  • Develop and tune detection logic to improve signal quality and investigative value.
  • Build response playbooks and automate repeatable investigation and response tasks using scripting, APIs, and webhooks.
  • Use Infrastructure as Code, version control, testing, and change-management practices to maintain approved Cyber Defense resources.
  • Use AI-assisted workflows to improve analysis and efficiency while applying access controls, testing, human oversight, and audit requirements.
  • Monitor platform health; maintain technical documentation; share knowledge; and participate in security projects and the on-call rotation.

Other

  • Perform all other duties as assigned.
  • Participate in on-call rotations, including nights, weekends, and holidays.
  • Remains compliant with our policies, processes and legal guidelines.
  • Works primarily remotely with some occasional travel to a Credit Acceptance building.

Competencies:

  • Customer Empathy: Customer Empathy is the ability to understand the perspectives, pain points, and experiences of customers. It involves actively putting oneself in the customer’s shoes, comprehending their needs and challenges, and using that understanding to provide a better, more customer-centric experience.
  • Engineering Excellence: Engineering Excellence is about bringing great craftsmanship and thought leadership to deliver an outstanding product that delights customers and solves for the business. This involves the pursuit and achievement of high standards, best practices, innovation, and superior solutions.
  • One Team: A One Team mindset refers to a collaborative approach across the organization, where individuals work together seamlessly, without boundaries, as a single, cohesive team. Shared goals, open communication and mutual support create a sense of collective purpose. This enables teams to navigate challenges and pursue shared objectives more effectively.
  • Owner’s Mindset: Owner’s Mindset involves adopting a set of behaviors that reflect a sense of responsibility, accountability, strategic thinking, and a proactive approach to managing your domain. As an owner, you understand the business and your domain(s) deeply and solve for the right outcome for the domain(s) and the business.

Requirements:

  • Bachelor’s degree in computer science, Information Systems, Cybersecurity, or a related field, or equivalent practical experience.
  • Minimum 2 years of experience in cybersecurity engineering, security operations, incident response, or a related technical field.
  • Experience triaging cybersecurity alerts or incidents and supporting approved containment actions.
  • Hands-on experience supporting enterprise security platforms in at least two areas such as SIEM, EDR, secure web access, WAF, automation, or detection engineering.
  • Experience using a scripting or automation language and working with APIs, webhooks, or structured configuration files.
  • Experience with version control and Infrastructure as Code concepts.
  • Working knowledge of cloud services and cloud security logs.
  • Understanding of secure authentication, credential handling, and least-privilege access.
  • Knowledge of incident response, common attacker techniques, and established cybersecurity frameworks.
  • Ability to troubleshoot across multiple technologies and produce clear technical documentation.
  • Candidates must reside in or be willing to relocate to one of the following hub locations: the greater Southfield, Michigan, area; the greater Bellevue, Washington, area; or the San Francisco Bay Area, California.

Preferred:

  • Experience investigating incidents in public cloud environments and using cloud logs to determine scope.
  • Experience with security orchestration, incident-response automation, telemetry onboarding, or detection engineering.
  • Experience with secure web access or web application protection.
  • Experience creating reusable Infrastructure as Code modules.
  • Experience using AI-assisted development, agent-based workflows, or containerized automation.
  • Relevant cybersecurity, security operations, cloud fundamentals, or automation certifications.
  • Understanding of Credit Acceptance’s business model, operations and business terminology.

Knowledge and Skills:

  • Knowledge of cyber threats, vulnerabilities, and common attack methods.
  • Ability to connect security telemetry with investigative needs and translate response needs into maintainable automation.
  • Sound judgment during incident triage, containment, and escalation.
  • Critical thinking, attention to detail, and the ability to learn unfamiliar technologies quickly.
  • Ability to manage competing priorities and act independently.
  • Clear written and verbal communication tailored to the audience.
  • Ability to work across teams, share knowledge, and escalate risk appropriately

Target Compensation: This position offers a competitive base salary, with a range of $101,605 - $142,247.

This position is eligible for an annual variable cash incentive, between 7.5 - 15%. Actual amounts are based on individual performance.

Final compensation within the range is influenced by many factors including assigned hub location, role-specific skills, depth and experience level, industry background, relevant education and certifications.

This position follows a hybrid work model, offering two work-from-home days and three standard in-office days each week with the team and key stakeholders at a local office.

INDENGLP

#zip

#LI-Hybrid

Benefits

  • Excellent benefits package that includes 401(K) match, adoption assistance, parental leave, tuition reimbursement, comprehensive medical/ dental/vision and many nonstandard benefits that make us a Great Place to Work

Our Company Values:

To be successful in this role, Team Members need to be:

  • Positive by maintaining resiliency and focusing on solutions
  • Respectful by collaborating and actively listening
  • Insightful by cultivating innovation, accumulating business and role specific knowledge, demonstrating self-awareness and making quality decisions
  • Direct by effectively communicating and conveying courage
  • Earnest by taking accountability, applying feedback and effectively planning and priority setting

Expectations:

  • Remain compliant with our policies processes and legal guidelines
  • All other duties as assigned
  • Attendance as required by department

Advice!

We understand that your career search may look different than others. Our hiring team wants to make sure that this would be a fit not just for us, but for you long term. If you are actively looking or starting to explore new opportunities, send us your application!

P.S.

We have great details around our stats, success, history and more. We’re proud of our culture and are happy to share why – let’s talk!

Required degrees must have been earned at institutions of Higher Education which are accredited by the Council for Higher Education Accreditation or equivalent.

Credit Acceptance is dedicated to providing an inclusive environment for all. We are proud to be an Equal Opportunity Employer and value a culturally diverse workforce. We believe in ensuring all team members demonstrate mutual respect for one another. All qualified applicants will receive consideration for employment without regard to protected characteristics like age, race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.

California Residents: Please click here for the California Consumer Privacy Act (CCPA) notice regarding the personal information Credit Acceptance may collect from you.

Play the video below to learn more about our Company culture.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Credit Acceptance's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Credit Acceptance's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Credit Acceptance's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.