Senior Security Operations Engineer - Fleetio

About Fleetio

Fleetio is a modern software platform that helps thousands of organizations worldwide manage their fleet operations. Transportation technology is a hot market, and we’re leading the charge with raving fans and new customers signing up every day. We raised $450M in our Series D funding round in March of 2025 and are on an exciting trajectory as a company. Fleetio is also a proud founding member of the Rails Foundation!

Description

Our Business Technology team is looking for a Senior Security Operations Engineer to own the security of the tools, devices, identities, and data Fleetians rely on every day. You will help run corporate security operations end to end, covering detection and response, identity, endpoint, email, and SaaS security, data loss prevention, AI security, and vulnerability management, and make the day-to-day security calls that keep Fleetio safe.

You will be hands-on: engineering controls, writing and tuning detections, automating response, and closing gaps, not just administering tools. The goal is one connected defense, not a collection of consoles: a signal from Okta, CrowdStrike, Mimecast, or Google Workspace should drive action in the others automatically, so the environment protects itself and people step in only where judgment is needed. Around-the-clock monitoring is handled by our external SOC (CrowdStrike Falcon Complete); this role engineers the environment it watches, owns what happens when it escalates, and extends what it can see. You will work closely with our IT Operations and Compliance teams, our 3rd party SOC, and the Product Security team in Platform Engineering.

Our team treats AI as a core part of how we work. We build and use AI agents and automated workflows to handle toil, speed up investigation and response, and give our team more time for high-leverage work.

Who You Are

Our ideal candidate is a security engineer who likes to build. You are as comfortable writing a detection or a response playbook as you are working an incident. You think in systems: you see the gaps between tools and close them by wiring the tools together. You make sound security decisions on your own, explain them clearly to technical and non-technical people, and balance risk with how people actually work.

You stay calm when something breaks. You can take a vague report, work out quickly what happened and who is affected, and give leaders a clear, evidence-backed answer. Then you fix the root cause so it doesn't happen the same way twice.

You're curious about how AI is changing security operations, and you're eager to put it to work on triage, enrichment, and response.

Your Impact

As a Senior Security Operations Engineer on Fleetio's Business Technology team, you will:

• Own detection engineering and threat hunting in CrowdStrike Next-Gen SIEM: onboard log sources, write and tune detections across identity, email, SaaS, and endpoint telemetry, and keep false positives down
• Own security automation: chain our tools together through CrowdStrike Fusion SOAR and our workflow automation platform so a signal in one triggers enrichment, containment, paging, and ticketing in the others, plus AI agents that speed up triage and investigation
• Lead corporate incident response as technical lead, including third-party and supply-chain events: scope exposure quickly, confirm or rule out compromise, run forensics, tell leaders and employees what to do, and serve in the escalation rotation
• Own CrowdStrike Falcon configuration and detections, manage the Falcon Complete relationship and escalations, and maintain device trust checks and software inventory
• Own Okta authentication policy, MFA, session policy, and privileged access management, and automate user access reviews and audit evidence with Compliance
• Own Mimecast policy, secure network access, Google Workspace and key SaaS security settings, and SaaS security posture in CrowdStrike Falcon Shield
• Own data loss prevention: define and classify sensitive data, design and tune DLP policies across email, Google Workspace, endpoints, and key SaaS apps
• Own security for AI usage: visibility into AI tool usage, identity and access for AI agents, guardrails for internal agents and automations, and AI detection and response
• Run vulnerability management for corporate assets, prioritizing by exploitability and holding owners to fix deadlines

Your Experience

• 5+ years of experience in security operations, detection and response, or security engineering, ideally at a SaaS company
• Detection engineering and threat hunting in a SIEM (CrowdStrike Next-Gen SIEM or similar)
• Security automation: building SOAR playbooks (CrowdStrike Fusion or similar), with Python or PowerShell and REST APIs
• Incident response from first triage through forensics, root cause, and follow-up across cloud, identity, and SaaS environments
• Identity security with Okta or a similar provider in a SOC 2 or ISO 27001 control environment
• Endpoint security with CrowdStrike or similar, including macOS, plus device trust and endpoint query tooling
• Email security (Mimecast or similar) and SaaS security posture management
• Designing and running a DLP program and investigating data exposure
• Securing developer tooling and the software supply chain
• Excellent written and verbal communication skills

Considered a Plus

• Experience securing a company's use of AI (AI tool governance, AI detection and response tooling)
• Experience building AI agents, LLM-powered automations, or integrations for security operations workflows
• Experience using LLMs on real security alerts for triage, enrichment, and investigation

Benefits

• Multiple health/dental coverage options (100% coverage for employee, 50% for family)
• Vision insurance
• Incentive stock options
• 401(k) match of 4%
• PTO - 4 weeks (increases at year two!)
• 12 company holidays + 2 floating holidays
• Parental leave (16 weeks paid for birthing parent, 4 weeks for non-birthing)
• FSA & HSA options
• Short and long term disability (short term 100% paid)
• Community service & professional development funds
• Wellbeing fund ($150 quarterly) & Business expense stipend ($125 quarterly)
• Mac laptop + new hire equipment stipend