{"id":3853866,"url":"https://alion.io/job/planet-pharma-staff-engineer-cybersecurity","title":"Staff Engineer, Cybersecurity","company":{"id":4467183,"name":"Planet Pharma","domain":"planet-pharma.com","url":"https://alion.io/company/planet-pharma","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"B","score":80,"open_postings":11,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":15,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Alameda, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"JavaScript","optional":false},{"name":"Jira","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Tines","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-11-05T00:00:00Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-08T02:27:19Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"MARKET RATE\nJOB SUMMARY\nStaff Engineer, Cybersecurity\nJOB DESCRIPTION\nPosition Summary\nThe Staff Engineer, Cybersecurity is responsible for supporting day-to-day cybersecurity operations while helping improve team efficiency through targeted automation initiatives. Working within a small cybersecurity team, this individual will serve as a primary resource for operational ticket handling, security investigations, user requests, and security process execution.\nThe role requires developing a deep understanding of existing cybersecurity workflows, technologies, and business processes. While the primary focus is executing and managing operational work, the Staff Engineer will also identify opportunities to automate repetitive tasks and leverage SOAR and workflow automation platforms to improve consistency, reduce manual effort, and increase operational efficiency.\nSuccess in this role will be measured by operational excellence, ticket quality, responsiveness, and the ability to incrementally reduce manual workload through practical automation.\nEssential Duties and Responsibilities\nCybersecurity Operations (80%)\nOperational Ticket Management\n· Manage and resolve cybersecurity-related tickets and service requests.· Perform triage, investigation, escalation, and resolution activities in accordance with established procedures.· Ensure timely responses to operational requests and security events.· Document investigations, findings, and remediation actions within ticketing systems.· Maintain awareness of ticket queues and ensure service levels are met.Security Investigations\n· Investigate suspicious activity, security alerts, and user-reported concerns.· Perform account compromise, phishing, identity, endpoint, and access-related investigations.· Gather and analyze evidence from security tools and platforms.· Escalate complex incidents when appropriate.· Support incident response activities during security events.Operational Process Execution\n· Execute established security procedures and playbooks.· Support user access reviews, security assessments, and operational security tasks.· Coordinate with IT and business stakeholders to resolve operational issues.· Maintain accurate operational documentation and procedures.· Identify recurring issues and recommend process improvements.Security Platform Operations\n· Utilize security tools to investigate and respond to operational events.· Support monitoring and administration of cybersecurity technologies.· Validate security alerts and determine appropriate actions.· Assist with security control testing and operational validation activities.Automation and Continuous Improvement (20%)\nWorkflow Automation\n· Identify repetitive and time-consuming operational tasks suitable for automation.· Develop, test, and maintain SOAR workflows and automation playbooks.· Improve consistency and repeatability of operational procedures.Process Optimization\n· Analyze ticket trends and operational metrics.· Recommend improvements that reduce manual effort and increase efficiency.· Develop documentation for automated workflows and processes.· Measure automation effectiveness and operational benefits.Required Qualifications\nEducation\n· Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related discipline; or equivalent combination of education and experience.Experience\n· 5+ years of experience in cybersecurity operations, incident response, security engineering, or a related field.· 5+ years of experience investigating cybersecurity events and security alerts.· 5+ years of experience working within a ticket-driven operational environment.· 5+ years of experience supporting security technologies and operational processes.· 2+ years of experience with scripting, automation, or workflow orchestration platforms preferred.Technical Skills\nExperience with all of the following:\n· Security Operations Center (SOC) processes· Incident Response· Identity and Access Management· Microsoft 365 Security· Okta· Endpoint Detection and Response (EDR/XDR)· SIEM platforms· Email Security· Cloud Security (Azure/AWS)· ServiceNow, Jira, or similar ticketing platforms· Security investigation and threat analysis· SOAR platforms such as Tines, Cortex XSOAR, Splunk SOAR, or Microsoft Sentinel Automation· PowerShell, Python, JavaScript, or similar scripting languagesKey Performance Indicators\n· Timely handling and resolution of operational tickets.· Quality and completeness of investigations.· Adherence to operational procedures and service levels.· Reduction in manual effort through automation.· Number and effectiveness of implemented workflow improvements.· Accuracy and quality of documentation.· Contribution to overall team efficiency and scalability.Characteristics of a Successful Candidate\n· Strong operational mindset with attention to detail.· Comfortable managing a high volume of tickets and investigations.· Naturally curious and investigative.· Able to independently prioritize and execute work.· Process-oriented and focused on continuous improvement.· Practical experience automating repetitive tasks.· Effective collaborator in a small, fast-moving team environment.","description_format":"text","description_chars":5180,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-06T05:02:06Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":3,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":227500,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","Alion: sponsorship offered in the employer's own job adverts (24 months)"],"filings_for_role_12m":0}],"liveness":{"score":38,"band":"fade","label":"Fading","p_open":1,"p_active":0.379,"p_room":1,"age_days":2,"expected_fill_days":15,"reasons":["conf:3","agency","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/planet-pharma-staff-engineer-cybersecurity","json_url":"https://alion.io/job/planet-pharma-staff-engineer-cybersecurity.json","meta":{"generated_at":"2026-11-08T03:10:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6853,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4467183},"rest":"https://alion.io/mcp/rest/get_company?id=4467183"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fplanet-pharma-staff-engineer-cybersecurity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fplanet-pharma-staff-engineer-cybersecurity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fplanet-pharma-staff-engineer-cybersecurity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/planet-pharma-staff-engineer-cybersecurity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fplanet-pharma-staff-engineer-cybersecurity"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3853866}},{"tool":"search_jobs","arguments":{"company":"planet-pharma.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3853866},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}