Security Operations Engineer

About the Role

Join Supabase as a Security Operations Engineer to be the frontline guardian of our cloud platform, turning raw security alerts into resolved issues and ensuring every team stays secure by default.

Responsibilities

• Own inbound security triage, monitoring and sorting reports from bug-bounty platforms, compliance tooling, support tickets, and internal requests.
• Quickly assess severity and business impact, file actionable tickets, and route them to relevant product teams.
• Manage and improve security tooling, including Mobile Device Management, EDR, and other security-related systems.
• Triage and follow up on IDS alerts, coordinating with Engineering and Infrastructure teams.
• Ensure alerting systems and workflows remain effective, actionable, and low-noise.
• Drive incident response & follow-through, coordinating investigation, remediation, and post-mortem activities for security events.
• Track SLAs, chase blockers, and close the loop with reporters.
• Keep security signals healthy by tuning alert rules, improving duplicate/false-positive handling, and feeding lessons learned back into detections and playbooks.
• Maintain and refine runbooks, workflows, and metrics dashboards.
• Support compliance & assurance initiatives by collecting evidence for audits (SOC 2, HIPAA) and partnering to turn operational gaps into long-term control improvements.
• Champion security culture by responding to ad-hoc security questions and contributing to internal training and knowledge-base articles.

Requirements

• 3+ years of experience in security operations (SOC, CERT, or similar on-call/triage) for a cloud-native product company.
• Comfortable with bug-bounty platforms (HackerOne, Bugcrowd), compliance tooling (Vanta, Drata), ticketing/CRM systems (HubSpot, Jira), and at least one log/SIEM stack.
• Process-oriented with strong follow-up skills.
• Clear and empathetic communicator, able to translate security jargon effectively.
• Working knowledge of common frameworks like SOC 2, HIPAA, ISO 27001, or related standards.
• Comfortable in an async-first, globally distributed team environment.

Nice-to-Haves

• Hands-on scripting for automation.
• Experience with threat-intel feeds.
• Prior work in a high-volume bug-bounty program.

About the Role Impact

Safeguarding user data is core to the Supabase mission. This role is critical in protecting the cloud platform and ensuring the security posture across all teams.