Security Operations Engineer (Cybersecurity)

TL;DR

Security Operations Engineer (Cybersecurity): Providing first-line coverage for security alerts, customer security tickets, and internal IT requests with an accent on triage, identity verification, and incident response. Focus on optimizing security runbooks, managing access control, and maintaining 24-hour global coverage.

Location: Remote (Global)

Company

Supabase is a Postgres development platform providing a complete backend solution including Database, Auth, Storage, and Vector Search.

What you will do

• Act as the first responder for security alerts from GuardDuty and dependency advisories, assessing severity and escalating to appropriate leads.
• Manage customer security tickets including account recovery, MFA resets, and organization ownership disputes.
• Participate in a follow-the-sun on-call pager rotation to ensure 24-hour security coverage.
• Maintain and improve security runbooks, decision trees, and escalation paths to identify automation opportunities.
• Triage internal IT requests involving SSO/Okta issues, device management, and compliance audit trails.
• Communicate clearly with customers and internal stakeholders during time-critical security incidents.

Requirements

• Prior experience in technical support, IT helpdesk, junior SOC analysis, trust and safety, or fraud operations.
• Foundational understanding of MFA, JWTs, identity verification, and access control concepts.
• Knowledge of IT systems such as SSO, identity providers (Okta, Google Workspace), and MDM tools (Kandji, Jamf).
• Ability to use a terminal, basic SQL, and read simple scripts or macros.
• Strong customer-facing judgment and the ability to remain precise and firm during sensitive account issues.
• Comfort working asynchronously across global time zones with a documentation-first mindset.

Nice to have

• Familiarity with Postgres, AWS, or the developer tools ecosystem.
• Experience with tools like Front, Linear, Notion, Vanta, or Okta.
• Open-source contributions, CTF participation, or bug bounty experience.
• Basic scripting and automation experience to improve SOC or IT workflows.

Culture & Benefits

• Fully remote work environment with a provided WeWork membership or co-working allowance.
• Equity ownership (ESOP) for every team member.
• Budget for a custom tech allowance to set up your ideal work environment.
• 100% health insurance coverage for employees and 80% for dependents worldwide.
• Annual company-wide off-sites in different global cities.
• Annual education allowance for courses, books, and professional conferences.

Hiring process

• Application review followed by a short introductory video call.
• Up to four interviews with team leads, future teammates, cross-functional peers, and leadership.
• Final decision and offer.