Senior Engineer, Security Operations

ACV is a technology company that has revolutionized how dealers buy and sell cars online. We are transforming the automotive industry. The Senior Operations Engineer is a critical role responsible for the overall security posture of ACV Auctions Threat landscape.

Requirements

• Lead proactive, hypothesis-driven threat hunting across endpoint, cloud, and identity environments
• Develop and refine detection logic, correlation rules, and behavioral analytics within SIEM and EDR platforms
• Map adversary tactics, techniques, and procedures (TTPs) to MITRE ATT&CK to improve detection coverage
• Analyze threat intelligence and emerging attack patterns to strengthen defenses
• Lead and scale cybersecurity operations across enterprise or multi-tenant environments
• Oversee incident triage, investigation, containment, and remediation
• Act as escalation point for high-severity incidents
• Improve alert fidelity and reduce false positives through tuning and automation
• Mature the alert and incident management tracking systems
• Standardize workflows and playbooks to ensure operational consistency
• Design and implement incident response frameworks and playbooks
• Lead response efforts for advanced threats across environments supporting up to large user bases
• Conduct root cause analysis and post-incident reviews
• Automate response actions to reduce mean time to detect/respond (MTTD/MTTR)
• Secure multi-cloud environments (AWS, GCP) through posture management and configuration monitoring
• Detection of Zero Trust principles and violations across identity and access management systems
• Strengthen controls within platforms such as, CASB and DLP solutions
• Automate workflows and security operations processes for tracking the remediations actioned against the environment
• Integrate tooling and orchestrate response using SOAR or similar platforms
• Continuously improve detection capabilities and operational efficiency
• Deliver AI enabled automations and tooling for the ACV Security Operations Center
• Deliver executive-level reporting (MBRs/QBRs) on security posture, threats, and risk
• Translate technical findings into business-relevant insights to present to external stakeholders
• Collaborate cross-functionally with IT, engineering, and leadership teams
• Perform additional duties as assigned

Benefits

• Multiple medical plans including a high deductible, low cost health plan
• Company-sponsored (paid) Short-Term Disability, Long-Term Disability, and Life Insurance
• Comprehensive optional benefits such as Dental, Vision, Supplemental Life/AD&D, Legal/ID Protection, and Accident and Critical Illness Insurance
• Generous paid time off options
• Employee Stock Purchase Program with additional opportunities to earn stock in the Company
• Retirement planning through the Company’s 401(k)