Staff Security Platform Engineer
Aurora
Pennsylvania
Who We Are Aurora’s mission is to deliver the benefits of self-driving technology safely, quickly, and broadly. The Aurora Driver will create a new era in mobility and logistics, one that will bring a safer, more efficient, and more accessible future to everyone. At Aurora, you will tackle massively complex problems alongside other passionate, intelligent individuals, growing as an expert while expanding your knowledge. For the latest news from Aurora, visit aurora.tech or follow us on LinkedIn. What We Are Looking For Aurora hires talented people with diverse backgrounds who are ready to help build a transportation ecosystem that will make our roads safer, get crucial goods where they need to go, and make mobility more efficient and accessible for all. We're searching for a Staff Security Platform Engineer to join our Enterprise Security Engineering team, reporting to the Technical Lead Manager of Security Engineering. Aurora is scaling its autonomous trucking operations, and we need someone who makes our security tools actually work, not just deployed, but deeply configured, continuously tuned, and fully leveraged. This role is for the practitioner who has spent their career living inside security platforms: the person who knows their EDR better than the vendor's own support team, who can write a SIEM query from memory, and who instinctively knows when an alert is misfiring and exactly why. This is not a software engineering role. It's a role for an elite security operator — someone with the instincts of a seasoned SOC analyst and the technical depth to own the platforms that power detection, response, and protection at enterprise scale. If you find deep satisfaction in mastering a tool, closing a coverage gap, or hunting down a threat that nobody else noticed, this role was written for you. In this role you will
- Own the operational health, configuration, and continuous improvement of Aurora's enterprise security platform stack — including EDR/XDR, MDM, SIEM, DLP, IAM/IGA, DNS security, Email security, and PKI — ensuring each tool is tuned, policy-complete, and delivering reliable signal.
- Develop and refine detection rules, correlation logic, and alert policies, reducing noise while ensuring Aurora maintains high-fidelity coverage against real threats.
- Conduct proactive threat hunting across Aurora's security telemetry — forming hypotheses, querying logs, and investigating anomalies before they surface as incidents.
- Serve as the deepest internal expert on Aurora's enterprise security tooling, acting as the escalation point for complex platform issues, misconfigurations, and detection failures.
- Participate in the team's on-call rotation, leading deep-dive investigations into security alerts and incidents and driving triage, containment, and root cause analysis.
- Continuously audit and validate that existing security controls are configured to actually do what they're supposed to do — not just deployed and forgotten.
- Maintain operational runbooks, detection documentation, and platform configuration records, ensuring the team can operate consistently and scale institutional knowledge.
- 12+ years of hands-on experience in enterprise security operations, security platform administration, or a senior SOC engineering role — with a career built on deep operational ownership of security tooling rather than software development.
- Expert-level proficiency administering and operating at least two enterprise security platforms (e.g., CrowdStrike, SentinelOne, Splunk, Panther, Sentinel, Jamf, Kandji/Iru, Puppet, WorkspaceONE, Intune, Zscaler, Okta, Proofpoint, Wiz, osquery), with strong working knowledge across several others.
- Demonstrated ability to tune and optimize security platforms beyond out-of-the-box configurations — writing custom detection logic, adjusting policy sets, and validating control effectiveness.
- Strong log analysis and threat hunting skills: you know how to build a hypothesis, write the query, follow the thread, and know when to escalate.
- Experience conducting thorough incident investigations — triage, containment, root cause analysis, and post-incident review — and communicating findings clearly to technical and non-technical stakeholders.
- Ability to assess security control effectiveness: not just "is this tool deployed" but "is it configured correctly, covering the right scope, and generating actionable signal."
- Comfort working under pressure in ambiguous, fast-moving situations with competing priorities.
- Scripting ability for automation, log parsing, or workflow improvement (Python, Bash, or similar) — you don't need to be a software engineer, but you can write a script when it saves you an hour.
- Deep familiarity with MITRE ATT&CK as an operational tool for detection gap analysis and threat hunting hypothesis development.
- Experience with AWS security telemetry (CloudTrail, GuardDuty, Security Hub) and integrating cloud signals into a corporate SIEM.
- Familiarity with Zero Trust and identity-centric security models as they apply to policy enforcement in IAM and endpoint platforms.
- Platform-specific certifications such as CrowdStrike Certified Falcon Administrator, Splunk Core Certified Power User, or equivalent — or practitioner certifications like GCIH, GCIA, GCFE, or GCFA.
Posted 2026-06-12
Recommended Jobs
Land Operator
NOV
Leetsdale, PA
JOB DESCRIPTION Primary Responsibilities Complete solids control rig ups, rig downs, troubleshooting, and minor repairs in a safe and efficient manner. Perform solids control analysis a…
View Details
Posted 2026-02-14
Agent Sales Advisor
Integrity Marketing Group
Harrisburg, PA
: About Ritter Insurance Marketing Ritter Insurance Marketing is an independent marketing organization supporting independent insurance agents in the senior health and life insurance market. Base…
View Details
Posted 2026-06-11
People Team Coordinator (Located on site in Philadelphia)
Oatly AB
Philadelphia, PA
Hello potential future Oatly employee. It’s us, the original oatmilk company that started in Sweden back 25 or so years ago and has since expanded to the U.S. where we’ve continued growing at a rate …
View Details
Posted 2026-06-09
Fleet Service Manager (Motor Carrier) - ZMC Logistics
M. Simon Zook Co.
Honey Brook, PA
Shift and schedule Ability to work a flexible schedule when needed Weekends as needed Full-Time M-F Job description The working Fleet Service Manager will lead daily maintenance operat…
View Details
Posted 2026-05-22
Ground Crew Member
Sarver Landscape
Wexford, PA
Climb your way to success with Sarver Landscape! We are currently recruiting for a Ground Crew Member. If you are someone who is looking for a unique employment opportunity, who thrives in the outdoo…
View Details
Posted 2026-03-22
Culinary Assistant (Grill Cook)
Swarthmore College
Swarthmore, PA
Swarthmore College is a highly selective liberal arts college located in the suburbs of Philadelphia, whose mission combines academic rigor with social responsibility. Swarthmore has a strong institut…
View Details
Posted 2026-05-21
- Home Health Aide (HHA) Fulltime 1st Shift in Weedville
Interim HealthCare- Christian Miller
Weedville, PA
Job Description Job Description Home Health Aide/CNA for Pediatric School Case in Weedville Full Time M-W 6:30am-6:30pm, Th & F 7a-3p Weekend Hours are available: 8am-4pm General Purpose…
View Details
Posted 2026-03-20
5 Experienced Roll-Off Driver? Lets Talk. $60K$90K
redbox+ Dumpsters of Lancaster & Chester County
Gap, PA
Job Description Job Description Benefits: ~401(k) matching ~ Bonus based on performance ~ Health insurance ~ Opportunity for advancement ~ Paid time off ROLL-OFF DRIVER? READY FOR …
View Details
Posted 2026-05-23
Science Writer
American Association for Cancer Research
Philadelphia, PA
The science writer in the Communications and Public Relations Department is responsible for translating scientific data and information related to cancer research into content that helps educate the …
View Details
Posted 2026-06-06