{"id":2160668,"url":"https://alion.io/job/sword-health-senior-security-operations-engineer","title":"Senior Security Operations Engineer","company":{"id":591,"name":"Sword Health","domain":"swordhealth.com","url":"https://alion.io/company/sword-health","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":133000,"max":209000,"currency":"USD","period":"year","gross":null,"usd_annual":209000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"Google SecOps","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"ISO 27001","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Threat Modeling","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false}],"status":"live","first_seen_at":"2026-09-09T11:10:59Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-20T14:37:50Z","board_verified":true,"closed_at":null,"days_open":41,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":41},"description":"At Sword, we’re building AI to heal billions and unlock humanity’s full potential. In doing so, we’re pioneering AI Care, a fundamentally new approach to healthcare built for medical reasoning, safety, and real-time treatment, not generic technology applied after the fact. As both a clinical-centric frontier AI lab and an applied AI platform, Sword is reimagining how care is delivered at scale, removing traditional barriers like appointments, waiting rooms, and stigma so more people can access the care they need-and ultimately get back to lives lived in full.\nSince 2020, Sword has expanded across physical therapy, women’s health, cardiometabolic, and mental health, and is now moving beyond the session to a fully AI-native, 24/7 care program that brings physical activity, therapeutic exercise, psychotherapy, nutrition, and behavior change into one connected experience. More than 700,000 members across three continents have completed over 10 million AI sessions, helping 1,000+ enterprise clients avoid more than $1 billion in unnecessary healthcare costs. Backed by 42 clinical studies, 44+ patents, and more than $500 million raised from leading investors including Khosla Ventures, General Catalyst, and Founders Fund, Sword is defining a new standard for healthcare.\nAI Proficiency at Sword\nAI fluency is a core expectation at Sword. Every candidate is assessed against our three-level framework - be ready to share real examples of how AI is already part of how you work.\nExplorer (Level 1) - Uses AI daily to boost personal productivity\n\nBuilder (Level 2) - Creates workflows and tools that elevate the whole team\n\nIntegrator (Level 3) - Embeds AI into products and processes at scale\n\nEvery hire must demonstrate at least Level 1. The expected level will vary depending on the seniority of the role.\nRole\nAs a Senior Security Engineer (Security Operations) at Sword, you will be at the forefront of safeguarding our cloud infrastructure and applications. Your expertise will ensure robust security measures, incident response, and continuous improvement. \nAre you looking to join an incredible IT team, passionate about simplifying everyone's work? Look no further, we're hiring! We're a proactive team, constantly staying ahead to ensure everything runs smoothly. As an IT Team we understand the importance of technology in today's workplace and the impact that technical issues can have on productivity and efficiency. Want to join the team? Find out if you've got what it takes!\nTo get to know more about our Tech Stack, check here.\n\nWhat you’ll be doing\nDesign and continuously improve detection and alerting controls, ensuring high fidelity and contextual relevance to reduce noise and enable rapid response.\nArchitect, refine, and maintain custom YARA-L detection rules and SOAR playbooks in Google SecOps to automate triage, alert enrichment, and initial incident response.\nDrive prioritization of alerts using a data-driven, scalable triage framework, aligned with business impact and threat context.\nLead end-to-end incident investigations in Google SecOps, leveraging complex telemetry correlation to proactively hunt for threats, contain active incidents, and drive root-cause remediation.\nProactively engage in threat intelligence and threat hunting, identifying new tactics, techniques, and procedures (TTPs), enriching existing controls, and feeding insights into the detection pipeline.\nOwn incident handling from detection to resolution, collaborating with engineering, IT, and business teams to contain, eradicate, and recover from threats.\nDefine and maintain operational metrics for incident response, using them to drive continuous improvement in speed, accuracy, and organizational readiness.\n\nWhat you need to have\nRequired: Public Trust Clearance - Candidates must be able to obtain and maintain a US public trust clearance.\nBachelor’s degree in Computer Science, Cybersecurity, or equivalent professional experience.\nSolid experience in cloud environments (AWS, GCP, or Azure), with strong understanding of cloud-native threats.\nProficiency in scripting languages (e.g., Python, Bash) for automation and tooling development.\nHands-on experience with SOC tools and platforms, such as SIEM (Splunk, Sentinel, Google SecOps/Chronicle, etc.), SOAR, EDR/XDR, and log management.Highly Preferred: Google SecOps/Chronicle\n\nStrong understanding of incident containment and eradication strategies, with proven ability to coordinate response with technical teams.\nFamiliarity with security frameworks and standards (NIST 800-61, CIS Controls, MITRE ATT&CK, ISO 27001).\nExcellent analytical, critical thinking, and problem-solving skills.\nAbility to consume and synthesize intelligence about actors, techniques or situations to identify emerging risk scenarios.\nProficiency in process formulation and improvement.\nBackground in threat modeling, adversary emulation, and risk-based alert tuning.\nStrong communicator with the ability to explain security risks and actions to both technical and non-technical audiences.\nProven track record of leading cross-functional efforts in high-pressure situations.\nAbility to foster collaboration across InfoSec, IT, and engineering teams.\nForensics experience, investigating incidents and preserving digital evidence.\nLeverage AI to automate and optimize security operations workflows, including alert triage, enrichment, and incident classification.\nDesign and maintain AI-assisted runbooks, ensuring consistency, auditability, and human-in-the-loop validation for critical decisions.\nIdentify opportunities to improve SOC efficiency through AI-driven automation, while maintaining strong controls and avoiding over-reliance on unverified outputs.\nIntegrate security tooling with AI platforms and APIs to streamline investigation, response, and reporting processes.\nEnhance vulnerability management and incident response workflows through intelligent prioritization, correlation, and contextualization of findings.\nContinuously evaluate the accuracy, reliability, and security implications of AI-assisted decisions in operational environments.\n*The range below reflects base, variable, and equity for this role.\nThis is a starting point, not a ceiling - once someone joins and proves they're outlier talent, we adjust quickly to make sure their compensation matches their impact.\nJob titles may span more than one career level, so actual pay depends on skills, qualifications, experience, location, and market demand, among other factors. The range reflects base salary plus any variable, bonus, or sales incentives, and our estimate of the value of private company stock options where applicable. It's subject to change, and future stock value isn't guaranteed. Sword also offers additional benefits beyond total compensation.\nTotal Compensation Range\n$133,000—$209,000 USD\nCountry-specific benefits may vary and will be detailed separately.\nSword Health complies with applicable Federal and State civil rights laws and does not discriminate on the basis of Age, Ancestry, Color, Citizenship, Gender, Gender expression, Gender identity, Gender information, Marital status, Medical condition, National origin, Physical or mental disability, Pregnancy, Race, Religion, Caste, Sexual orientation, and Veteran status.","description_format":"text","description_chars":7285,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Physiotherapy & Rehabilitation","Medical AI","Digital Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-09T08:22:52Z"}],"visa":[],"liveness":{"score":50,"band":"ok","label":"Likely open","p_open":1,"p_active":0.901,"p_room":0.55,"age_days":40,"expected_fill_days":40,"reasons":["conf:0","velocity","win:tail"],"computed_at":"2026-10-20T05:45:00Z"},"pay":{"stated_usd_annual":209000,"is_top_pay":true},"html_url":"https://alion.io/job/sword-health-senior-security-operations-engineer","json_url":"https://alion.io/job/sword-health-senior-security-operations-engineer.json","meta":{"generated_at":"2026-10-20T15:40:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17737,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":591},"rest":"https://alion.io/mcp/rest/get_company?id=591"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsword-health-senior-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsword-health-senior-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsword-health-senior-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sword-health-senior-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsword-health-senior-security-operations-engineer"}]}