Security Engineer

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.

About the Role

Veeam VDC Security Engineering builds and operates the security platform for a multi-cloud (Azure and AWS) SaaS serving regulated industries. This role sits in Security Engineering and helps drive security as a discipline. You will design and operate detection systems that identify threats across our infrastructure, lead response efforts to investigate and remediate security incidents at scale, and drive the vulnerability management program to reduce risk systematically.

What You’ll Do

• Design and deploy detection rules and analytics across VDC's cloud infrastructure, leveraging SIEM platforms, log aggregation, and behavioral analysis to identify suspicious activity in real-time
• Build and operationalize incident response runbooks that automate triage, containment, and remediation workflows while maintaining audit trails for compliance
• Develop correlation and detection logic that surfaces real security threats with a low false-positive rate, enabling fast investigation and response without alert fatigue
• Own and evolve VDC's vulnerability management program, including scanner integration, severity classification, SLA enforcement, and remediation tracking across infrastructure and applications
• Partner with engineering teams to integrate security telemetry, detection hooks, and vulnerability scanning into applications and infrastructure, creating visibility into attack surfaces and threat indicators
• Partner with Compliance to ensure detection systems, incident response procedures, and vulnerability tracking generate auditor-facing evidence that holds up under regulatory review (SOC 2 Type 2, ISO 27001, FedRAMP, HITRUST)
• Lead threat hunting initiatives to proactively identify compromises, lateral movement, and persistence mechanisms within VDC's environment
• Establish and evolve incident response procedures, playbooks, and vulnerability remediation processes across VDC teams, including containment strategies, communication protocols, and post-incident reviews

Technologies You’ll Work With