{"id":2493718,"url":"https://alion.io/job/papaya-global-secops-engineer","title":"SecOps Engineer","company":{"id":49167,"name":"Papaya Global","domain":"papayaglobal.com","url":"https://alion.io/company/papaya-global","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Herzliya, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":65000,"max_usd":155000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Bash","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-12T18:44:02Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-17T11:06:30Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Description\nPapaya Global is a rapidly growing, award-winning B2B tech unicorn with an ambitious mission to revolutionize the payroll & payments industry. With over $400M raised from multiple tier-one investors, our innovative technology provides a comprehensive solution for managing global workforces, encompassing everything from hiring and onboarding to managing and paying employees in over 160 countries.\nAbout the job\nWe are looking for a SecOps Engineer t o join our cybersecurity team. In this role, you will help defend the organization end-to-end across cloud, endpoints, identities, and applications while building and maturing our security operations capability.\nYou will work across SIEM and telemetry, detection engineering, alert investigation, threat hunting, digital forensics and incident response, threat intelligence, and response automation. You will partner closely with IT, DevOps, Application Security, R&D, and business stakeholders to turn security signals into effective action and lasting improvements.\nThis is a hands-on role for someone who enjoys investigating complex problems, improving controls, and building repeatable security operations in a growing environment. The role may participate in an on-call rotation and occasional after-hours incident response as required.\nResponsibilities\nOperate and improve the security operations stack - SIEM, identity, endpoint, cloud, and application telemetry - including log source onboarding, health monitoring, and coverage-gap remediation. \nInvestigate security alerts and threats through triage, host and artifact analysis, DFIR, and threat hunting. \nLead incident response from detection through containment, recovery, and post-incident review. \nBuild and tune detection rules, SIEM queries, and dashboards for high-risk attack paths, and convert threat intelligence into new detections, hunts, and control improvements. \nAutomate response and enrichment workflows by using AI tools, scripting (Python, Bash, PowerShell), or SOAR tools to cut response time, and report incident metrics - root cause, impact, and remediation status. \nSupport security reviews of vendors, SaaS platforms, and internal applications, and partner with engineering to validate whether existing controls detect and mitigate relevant threats. \nSupport security monitoring and response for AI-enabled workflows and artifacts where applicable, including agentic tooling, integrations, and related operational risks. \nUse AI-assisted triage and anomaly-detection models to prioritize alerts and cut time-to-detect across SIEM and endpoint telemetry. \nDevelop agentic workflows to speed up evidence correlation, RCA, timeline reconstruction, and case write-ups during investigations. \nEvaluate AI agentic investigation tools for accuracy and performance and use the results to fine-tune and further enhance the automated playbooks. \nRequirements\n3+ years of hands-on experience in security operations, incident response, detection engineering, or a similar cybersecurity role. \nStrong practical experience with IT security, endpoint protection, identity security, and security operations. \nHands-on experience with SIEM platforms, including alert triage, investigation, query development, dashboards, and detection tuning. \nSolid understanding of cloud security and practical experience with one or more major cloud platforms, including identity, logging, network, and workload security concepts. \nExperience with incident response and DFIR workflows, including host-based and artifact analysis on Windows, Linux and macOS. \nProficiency in Python, Bash, PowerShell, or similar scripting languages for automation and operational tooling. \nFamiliarity with SOAR platforms, automated playbooks, alert enrichment, and response workflows. \nStrong written and verbal communication skills, with the ability to collaborate across DevOps, IT, R&D, security, and business teams. \nAbility and willingness to participate in occasional after-hours response when required by a material security incident. \nStrong familiarity with AI tools and experience putting them to work in security investigations. \nNice to have\nExperience building detections and incident-response capability in a growing or cloud-native organization. \nExperience with threat hunting, malware analysis, host forensics, and mapping activity to common adversary tactics, techniques, and procedures. \nExperience with containerized or cloud-native architectures, identity providers, and modern endpoint security platforms.","description_format":"text","description_chars":4528,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Employer of Record & PEO","Payroll Services"],"lifecycle":[{"event":"open","at":"2026-10-14T03:55:10Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.887,"p_room":1,"age_days":4,"expected_fill_days":21,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/papaya-global-secops-engineer","json_url":"https://alion.io/job/papaya-global-secops-engineer.json","meta":{"generated_at":"2026-10-17T12:11:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16119,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49167},"rest":"https://alion.io/mcp/rest/get_company?id=49167"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpapaya-global-secops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpapaya-global-secops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpapaya-global-secops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/papaya-global-secops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpapaya-global-secops-engineer"}]}