Attentive® is the AI marketing platform for 1:1 personalization redefining the way brands and people connect. We’re the only marketing platform that combines powerful technology with human expertise to build authentic customer relationships. By unifying SMS, RCS, email, and push notifications, our AI-powered personalization engine delivers bespoke experiences that drive performance, revenue, and loyalty through real-time behavioral insights.
Recognized as the #1 provider in SMS Marketing by G2, Attentive partners with more than 8,000 customers across 70+ industries. Leading global brands like Crate and Barrel, Urban Outfitters, and Carter’s work with us to enable billions of interactions that power tens of billions in revenue for our customers.
About the Role
As a Senior Corporate Security Operations Engineer you will help protect our workforce, corporate systems, identities, endpoints, SaaS applications, and business operations. This is a hands-on role spanning both Security Operations and Corporate Security, with a primary focus on incident response and security investigations.
You will investigate security incidents and suspicious activity, operate and improve security controls across our corporate environment, support third-party and customer security workflows, and partner closely with Security Engineering, IT, Legal, GRC, Procurement, and Engineering.
This role combines operational security with engineering. You should be comfortable moving between investigating a suspected account compromise, reviewing endpoint or SaaS activity, assessing a third-party vendor, responding to a customer security questionnaire, and improving the tooling or automation that makes those activities more scalable.
What You’ll Accomplish
- Lead and support security investigations and incident response involving account compromise, phishing and smishing, endpoint threats, suspicious SaaS activity, credential exposure, third-party applications, and other corporate security events.
- Monitor and investigate alerts across identity, endpoint, SaaS, email, SIEM, and other security platforms.
- Perform technical triage, determine severity and escalation paths, identify noisy detections or telemetry gaps, and partner with Security Engineering to improve detection and response quality.
- Lead and manage complex Corporate Security projects to improve controls across identity, endpoint, browser, SaaS, and Zero Trust, while proactively assessing and mitigating risk to maintain an acceptable security posture.
- Perform technical security assessments of software vendors and third party integrations, review security evidence and controls, work with vendors and internal stakeholders to resolve gaps, and support risk-based approval, exception, or escalation decisions
- Support customer security questionnaires, RFPs, and trust requests by providing accurate security responses, gathering supporting evidence, and partnering with the appropriate subject-matter experts for complex product, cloud, data, privacy, AI, or architecture questions, ensuring established response SLAs are consistently met.
- Improve Security Operations through automation, scripting, integrations, dashboards, workflow improvements, alert enrichment, and evidence collection.
- Participate in on-call rotation, maintain and improve incident response runbooks and playbooks, contribute to tabletop exercises, and help strengthen overall incident readiness.
- Communicate clearly with technical and non-technical stakeholders, document investigations and risk decisions, and collaborate across Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success.
Your Expertise
- 5+ years of experience in Security Operations, Incident Response, Corporate Security, Detection & Response, Security Engineering, or a related security discipline.
- Strong hands-on experience investigating security incidents and suspicious activity.
- Experience with identity, endpoint, SaaS, email, and security-monitoring telemetry.
- Strong understanding of common attacker tactics, techniques, and procedures.
- Experience with SIEM, EDR, identity, and enterprise SaaS security technologies.
- Ability to independently scope investigations, gather evidence, assess risk, and determine next steps.
- Experience with vendor security reviews, third-party risk, customer security questionnaires, or similar security-assurance work.
- Experience using scripting, APIs, automation, or integrations to improve security operations.
- Strong written and verbal communication skills and the ability to work effectively across technical and business teams.
- Experience with Python, Go, Bash, or similar scripting languages.
You'll get competitive perks and benefits, from health & wellness to equity, to help you bring your best self to work.
For US based applicants:
- The US base salary range for this full-time position is $140,000 - $207,000 annually + equity + benefits
- Our salary ranges are determined by role, level and location
#LI-AB
By applying for this position, your data will be processed as per Attentive's Privacy Policy.
Attentive Company Values
Default to Action - Move swiftly and with purpose
Be One Unstoppable Team - Rally as each other’s champions
Champion the Customer - Our success is defined by our customers' success
Act Like an Owner - Take responsibility for Attentive’s success
Learn more about
AWAKE, Attentive’s collective of employee resource groups.
If you do not meet all the requirements listed here, we still encourage you to apply! No job description is perfect, and we may also have another opportunity that closely matches your skills and experience.
At Attentive, we know that our Company's strength lies in the diversity of our employees. Attentive is an Equal Opportunity Employer and we welcome applicants from all backgrounds. Our policy is to provide equal employment opportunities for all employees, applicants and covered individuals regardless of protected characteristics. We prioritize and maintain a fair, inclusive and equitable workplace free from discrimination, harassment, and retaliation. Attentive is also committed to providing reasonable accommodations for candidates with disabilities. If you need any assistance or reasonable accommodations, please let your recruiter know.
