Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 72 days ago

Staff Security Engineer - Security Operations

Pantheon Systems, Inc20 open roles

Where
United Kingdom
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowStaff Security Engineer - Security OperationsPantheon Systems, Inc · United Kingdom

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Pantheon Systems, Inc's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.8% of postings close within 7 days. Measured by our own scanner across the market. Pantheon Systems, Inc postings stay open a median of 57 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.8%7 days
  4. 20.6%14 days
  5. 35.6%30 days
  6. 58.4%60 days
This job: posted 72 days ago

Pantheon Systems, Inc median: 57 days open

The posting

About Pantheon

Pantheon is the WebOps platform for websites that deliver extraordinary results. We believe in putting the magic of the internet in everyone's hands. That's why we're so passionate about helping developers, IT, and marketing develop, test, and release website changes faster and more reliably.

Pantheon's core values are Trust, Teamwork, Passion, and Customers First. We value individuality, humour, and balance, and we actively contribute to open-source communities. If you're ready to be the incident authority for a platform that ships critical infrastructure for hundreds of thousands of sites, this is your role.

The Role

As a Staff Security Engineer, SecOps, you are the technical anchor of Pantheon's security operations function, and above all, the person we trust to command our hardest incidents. When something serious happens, you set the tempo: scoping, severity, containment strategy, stakeholder communication, and the post-incident work that makes us stronger every time.

This is a staff-level role, which means your impact extends well beyond your own queue. You define the incident response methodology the whole team runs on, you turn every incident and hunt into better detections in partnership with Security Engineering, and you set the direction for what our automation should do next. We are an AI-forward security team: our SOAR capability already exists inside Google SecOps, and we are building ARES, our AI-assisted incident response platform. We are not hiring you to program SOAR playbooks. We're hiring you to bring the incident judgment that tells ARES what to automate, and the AI fluency to prototype it yourself with tools like Claude.

The engineers who thrive here come from engineering-shaped backgrounds, people who script, automate, read code, and learn new systems on their feet. and pair that with deep, tested incident response craft.

What You'll Do

  • Command major incidents. Lead response for our most complex and critical incidents end-to-end — data breach scenarios, coordinated attacks, platform-level events. Run the war room, make the severity and containment calls, coordinate Engineering, Legal, and executive stakeholders, and own the blameless post-incident review.
  • Own incident response methodology. Define and continuously improve the IR programme the team operates against: severity frameworks, escalation paths, playbooks and runbooks, on-call standards, SLAs, and the continuous-improvement loop that follows every incident. You are accountable for how Pantheon responds, not just that it responds.
  • Drive the hunting → detection feedback loop. Lead hypothesis-driven threat hunting mapped to MITRE ATT&CK across cloud, endpoint, and identity surfaces, and make sure every hunt and every incident feeds back into higher-fidelity, lower-noise detections in partnership with Security Engineering. Establish the methodology and coverage standards the team measures itself by.
  • Direct AI-assisted automation (ARES). Set the automation roadmap for triage, enrichment, investigation, and response based on what incidents actually demand. Use AI tools (Claude, LLM workflows) daily to prototype, accelerate investigations, and help build ARES, bringing the operator's judgment that turns automation from a demo into a force multiplier.
  • Govern the SIEM platform. Own governance of Pantheon's Google SecOps (Chronicle) platform - detection coverage, log source strategy, data quality, and cost - while the team handles day-to-day ingestion and connector work. Keep the platform aligned to how we actually detect and respond.
  • Level up the team. Mentor analysts and engineers through real incidents and hunts - pairing, review, and tabletop exercises. Set the technical bar for how SecOps investigates, documents, and improves.
  • Communicate up. Translate operational reality into risk narratives and programme-level metrics for senior leadership, and represent SecOps in architectural and product discussions.
  • Support the broader programme. Contribute operator judgment to threat intelligence priorities, vendor and tooling evaluations, resilience testing and red/purple team exercises, and partner with GRC on operational evidence for SOC 2, GDPR/NIS2, and related obligations.

What You Bring to the Table

  • 8+ years in information security with substantial time in security operations, including demonstrated command of major incidents — you can walk us through your methodology (scoping, severity, containment, communication, post-incident review), not just war stories. Deep incident response methodology knowledge (NIST 800-61 / SANS PICERL or equivalent, applied in production, not just certified) and a track record of building or materially improving an IR programme: playbooks, severity frameworks, escalation paths, PIR discipline. Threat hunting and detection craft: expert working knowledge of attacker tradecraft (MITRE ATT&CK) and proven ability to convert hunts and incidents into detection logic and response procedures. AI fluency: you use AI assistants and LLM tooling in your daily workflow today, and you're excited to apply them to investigation and response. If you can use Claude well, you can help us build ARES. An engineering mindset: comfortable with Python/Bash scripting, APIs, and cloud-native environments (GCP and/or AWS) — enough to prototype, automate, and hold your own in engineering design discussions. You learn new systems on your feet. CISSP (or equivalent depth — CISM, GCIH/GCIA/GDAT-class GIAC) demonstrating breadth across the security domains this role touches. Hands-on experience operating an enterprise SIEM (Google SecOps/Chronicle strongly preferred; Splunk, Sentinel, or Elastic acceptable) at governance level — coverage, log strategy, quality — not just query writing. Excellent written and verbal communication: you can brief an executive during an incident and write the PIR the team actually learns from.

What We Offer

We have all the usual perks and benefits, but what we can really offer you is a fantastic work environment powered by an amazing team.

  • Industry competitive compensation and equity plan
  • Robust vacation package with 28 days of holiday
  • Private medical and dental coverage
  • Life and critical illness insurance
  • Attractive workplace pension scheme
  • Access to Employee Resource Platform
  • Top-of-line equipment
  • Monthly allowance for wellness, reading, and access to LinkedIn Learning for continued development
  • Events and activities, both team-based and company-wide, that inspire, educate, and cultivate

Pantheon is an equal opportunity employer and we welcome applications from all backgrounds regardless of race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity, veteran status, disability, or any other classification protected by law. Pantheon complies with federal and local disability laws and makes reasonable accommodations for applicants and employees with disabilities. If you need a reasonable accommodation due to a disability for any part of the interview process, please contact [email protected].

To review the Employee and Applicant's Privacy Policy, click here.

Visa Sponsorship is not available at this time.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Pantheon Systems, Inc's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Pantheon Systems, Inc's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Pantheon Systems, Inc's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.