{"id":66792,"url":"https://alion.io/job/veeam-software-security-engineer-iii","title":"Security Engineer III","company":{"id":2260,"name":"Veeam Software","domain":"veeam.com","url":"https://alion.io/company/veeam-software","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":81,"open_postings":32,"ghost_share":0,"stale_share":0.75,"repost_share":0.031,"time_to_fill_p50_days":48,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Jose, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":205920,"max":343200,"currency":"USD","period":"year","gross":null,"usd_annual":343200},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Azure AKS","optional":true},{"name":"FedRAMP","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"SIEM","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-08-20T14:24:58Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-21T07:23:02Z","board_verified":true,"closed_at":null,"days_open":61,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":61},"description":"Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.\nAbout the Role\nWe're looking for a Security Engineer III to own how we detect and respond to threats across our cloud estate, and to build the security data lake that makes that possible. Our cloud-native SaaS platform runs on Microsoft Azure and AWS, delivering high-trust, secure data protection services to customers across regulated industries. This role sits in Platform Security and owns the detection engineering and cloud security surface end to end: the pipelines that get security telemetry into one queryable place, the detections that fire off it, and the guardrails in Azure and AWS that stop the finding from recurring. You'll partner closely with SRE, Product Engineering, and the rest of Security Engineering, and your work is based on shipped mechanisms rather than on advice given.\nWhat You’ll Do\nDesign and build our security data lake: decide what telemetry we ingest from Azure, AWS, SaaS, and endpoint sources, how it's normalized and retained, and what it costs, so that detection engineers and incident responders can answer questions in minutes instead of days\nWrite, tune, and version-control detections as code. Own the full lifecycle: hypothesis, query, test, deploy through CI/CD, measure false-positive rate, and retire what stops earning its keep\nBuild the response side with the detections. Automate triage and enrichment, wire runbooks into the tooling, and cut mean-time-to-detect and mean-time-to-respond on the alert classes that matter most\nHands on hardening our Azure and AWS environments: identity and RBAC boundaries, network egress, key and secret handling, logging coverage, and public-exposure control across multiple tenants and accounts\nDeliver cloud security controls as Terraform. Anything you fix once should land in the modules and pipelines so it stays fixed, in every environment, without a human remembering\nTurn cloud security posture findings into a prioritized, owned, and closing queue. Partner with the teams that own the resources and make remediation the path of least resistance\nRun detection coverage assessments against a recognized threat framework, find the gaps that matter for our platform and threat model, and close them\nSet direction on detection and cloud security tooling: what to adopt, what to retire, and what we build ourselves\nTechnologies You’ll Work With\nMicrosoft Sentinel, Log Analytics, and KQL for detection authoring and hunting\nAzure security services: Defender for Cloud, Entra ID, Key Vault, Azure Policy, Azure Monitor, Event Hubs\nAWS security services: CloudTrail, GuardDuty, Security Hub, IAM, Config, CloudWatch\nTerraform for all cloud security and detection infrastructure, with GitHub Actions and Azure DevOps as the delivery path\nWiz for cloud security posture, attack-path analysis, and vulnerability signal\nSecurity data lake and pipeline components: object storage (ADLS / S3), OCSF-style normalization, Azure Data Explorer or an equivalent query engine, and Azure Functions / Lambda for glue\nPython for detection tooling, enrichment, and automation, with comfort reading PowerShell and Bash\nSigma and detection-as-code patterns, plus Git-based review for every rule change\nWhat You’ll Bring\n5+ years in security engineering, cloud operations, or detection engineering, with recent hands-on ownership of production cloud security work\nProduction Terraform experience. You've written and maintained modules other teams consume, and you know why a security control belongs in code rather than in a runbook\nReal operational depth in both Azure and AWS: identity models, logging and audit sources, network boundaries, and where each provider's defaults leave you exposed\nDemonstrated detection building. You've written detections against real telemetry, tuned them against real false positives, and can explain a specific rule you shipped and how you validated it\nStrong cloud security fundamentals: RBAC and least privilege, secret and key management, egress control, and public-exposure prevention\nFluency in at least one query language for security data (KQL, SQL, or equivalent) and the judgment to know when a query problem is actually a data-model problem\nScripting and automation ability in Python or a comparable language, enough to build and maintain tooling rather than only configure vendor products\nA track record of shipping production code or infrastructure you can point to. This is a hands-on building role, not an advisory one\nBonus Skills\nMicrosoft Sentinel at production scale: analytics rules, automation rules, ingestion cost management, and multi-workspace design\nWiz experience, including turning posture and attack-path findings into an owned remediation workflow\nIncident response experience in a cloud environment, on-call or as an investigator\nSecurity data lake or SIEM migration experience, including cost and retention tradeoffs\nKubernetes and container security exposure (AKS, EKS) and runtime detection for containerized workloads\nFamiliarity with regulated-industry audit expectations (SOC 2 Type 2, ISO 27001, FedRAMP, HITRUST) and what auditors want from logging and monitoring controls\nRelevant certifications (Azure or AWS security specialty, GCIA, GCDA, or similar)\nWhat you'll get\nUnlimited paid time off, 12 paid holidays including 4 global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares\nPaid parental leave: 8 weeks for all parents, 16 weeks for birthing parents\nMedical, dental, and vision coverage starting on your first day\nMental health support, therapy sessions, and digital wellness tools via our Employee Assistance Program\n401(k) retirement plan with company matching contributions\nFertility, adoption, and surrogacy support through Maven, plus paid volunteer time\nAirVet: 24/7 virtual veterinary care at no cost\nLegal services, identity protection, and supplemental health insurance options\nTax-advantaged spending accounts for healthcare, dependent care, and commuting\nOpportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and learning events like our annual Global Day of Learning\nPay Transparency\nVeeam is committed to pay transparency and equitable compensation. For this role, the compensation range below reflects the expected total target compensation (TTC), inclusive of base pay and a competitive performance-based bonus. For roles with a commission plan, the compensation range represents On Target Earnings (OTE), which includes base salary plus variable commission. When determining compensation, Veeam takes into consideration factors such as experience, education, skills, and geographic zone. Offers are typically made below the midpoint of the range.\nIn addition to compensation, Veeam provides a comprehensive benefits package, including health coverage, retirement plans, and unlimited time off.\nCompensation Range (TTC / OTE)\n$205,920—$343,200 USD\nVeeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.\nPersonal data collected during the recruitment process will be processed in accordance with our Recruiting Privacy Notice, which explains how your information is collected, used, and handled in connection with hiring activities. By applying for this position, you consent to this processing. \nBy submitting your application, you confirm that the information provided, including any supporting documents, is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification may result in disqualification from consideration or, if discovered after employment begins, termination of employment.","description_format":"text","description_chars":8508,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-08-20T14:24:58Z"},{"event":"close","at":"2026-09-28T00:18:13Z"},{"event":"reopen","at":"2026-10-20T16:00:02Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4","filings_12m":4,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":152500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.452,"p_room":0.44,"age_days":61,"expected_fill_days":48,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":343200,"is_top_pay":true},"html_url":"https://alion.io/job/veeam-software-security-engineer-iii","json_url":"https://alion.io/job/veeam-software-security-engineer-iii.json","meta":{"generated_at":"2026-10-21T11:19:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15983,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2260},"rest":"https://alion.io/mcp/rest/get_company?id=2260"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fveeam-software-security-engineer-iii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fveeam-software-security-engineer-iii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fveeam-software-security-engineer-iii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/veeam-software-security-engineer-iii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fveeam-software-security-engineer-iii"}]}