Mid Level Security Operations Engineer Jobs
Mid level security operations engineer jobs go to engineers ready to own incident response workflows, lead threat investigations, and make security decisions without hand-holding. Roles cover 33% remote or hybrid settings across Technology & Software, Retail, and E-Commerce & Online Marketplaces, with employers like Amazon, Brex, and Paylocity hiring at this level now.
Find JobsOverview
Showing 5 of 239+ Mid Level Security Operations Engineer jobs
IT Ops Automation Engineer
Overview
At BusPatrol, we’re transforming student transportation safety through cutting-edge technology and real-time automated enforcement. We're seeking an IT Automation Engineer to be at the forefront of our IT Operations evolution— replacing manual toil with code, durable serverless workflows, and reliable integrations across Microsoft 365, Azure, Freshservice, Jira, and our line-of-business platforms (AlertBus, Console, NetSuite, OpenPath, Five9, Tableau, Ashby, and more).
You will lead the design, build, and operation of these automations end-to-end — a hands-on engineering role embedded in the IT Service Operations & Enablement (ITSOE) team. You will own production Azure Function Apps, Azure Automation runbooks, Power Automate flows, and Playwright-driven web automations that replace manual, repeatable processes in IT operations.
You’ll collaborate with ITSOE leadership, service desk agents, and business partners to identify high-volume, manual work and replace it with reliable, observable, well-tested automations — moving the team from reactive ticket processing to proactive platform enablement
Key Responsibilities
Design, build, deploy, and support secure IT automations across Azure, Power Platform, and related enterprise platforms using least-privilege and production-ready standards.
Develop and maintain automation solutions using TypeScript/Node.js, PowerShell, and Python, selecting the right toolset for each use case.
Administer and optimize Azure services that support automation, including Function Apps, Automation Accounts, Logic Apps, Storage, Key Vault, Service Bus, and monitoring tools.
Build and support event-driven, scheduled, and API-based workflows that improve IT service delivery, onboarding, offboarding, access management, and audit processes.
Create and maintain integrations across core business systems such as Freshservice, Jira, Microsoft 365, Entra ID, SharePoint, and other SaaS platforms.
Perform ticket and operational data analysis to identify high-value automation opportunities by evaluating volume, repeatability, business impact, process stability, and technical feasibility.
Use data insights to recommend and prioritize automation candidates that reduce manual effort, improve cycle time, and strengthen service quality.
Apply sound engineering practices including testing, source control, CI/CD, logging, error handling, documentation, and reusable design patterns.
Monitor automation health and performance through dashboards, telemetry, alerting, and trend analysis, and continuously improve reliability and business outcomes.
Establish and document standards for selecting the appropriate automation runtime, architecture, and support model for each workflow.
Partner with Service Desk and IT Operations teams to refine processes, reduce operational friction, and mentor others in automation best practices.
Preferred Qualifications
3+ years building production automations in an internal IT, IT Ops, or Service Desk engineering context (L2/L3 or beyond).
Strong hands-on experience with TypeScript / Node.js and Azure Function Apps, including:
Durable Functions (orchestrators, activities, fan-out/fan-in, sub-orchestrations, eternal orchestrations).
HTTP, Timer, Queue, Service Bus, and Blob triggers.
Retry policies, exponential backoff, idempotent activities, and dead-lettering.
Production experience with Playwright (Node.js / TypeScript), including:
Microsoft SSO / Entra login flows and stored auth state.
Page Object Model, role-based locators, trace/video capture.
Running at scale via Microsoft Playwright Workspaces or equivalent (Azure Container Apps, self-hosted runners).
Strong Power Automate (cloud flows) skills — SharePoint, Outlook, Teams, HTTP with Entra ID, Dataverse, custom connectors, approvals, and scheduled flows.
Hands-on with Azure Automation runbooks (PowerShell 7 and/or Python), including webhooks, schedules, hybrid workers, and shared modules.
Working knowledge of Microsoft Graph API (SharePoint site usage, Entra ID users/groups, license assignment, mail, calendar) and Azure Blob Storage (lifecycle policies, SAS, Managed Identity access).
REST API integration experience with Freshservice and Jira Cloud — auth, pagination, custom fields, custom objects, webhooks, and the Freshservice Service Catalog.
Nice to Have
Logic Apps Standard for stateful, connector-heavy orchestrations.
Azure Service Bus / Event Grid for cross-platform event fan-out.
Application Insights + Log Analytics (KQL) dashboards and alerting; Azure Workbooks authoring.
Power Apps (canvas + model-driven) and Dataverse for self-service portals and structured ops data.
Azure Document Intelligence / Form Recognizer for OCR pipelines on inbound mail or citation documents.
Microsoft 365 admin depth: Entra ID lifecycle workflows, conditional access, Intune device compliance, SharePoint admin, Exchange Online, Teams.
Freshservice Workflow Automator, Custom Objects, Onboarding/Offboarding modules, and Freshservice Analytics.
Integrations with Ashby, NetSuite, Salesforce, Tableau, OpenPath, Five9, or 1Password via API or SCIM.
Cross-platform observability tooling.
Why Join Us
Be part of a mission-driven company making roads safer for students and communities.
Help architect the future of our Automated Safety Platform.
Work on modern, cloud-native, and serverless technologies.
Collaborate with a global, inclusive, and high-performing team.
Compensation Range: $70K - $80K
IT Ops Automation Engineer
Overview
At BusPatrol, we’re transforming student transportation safety through cutting-edge technology and real-time automated enforcement. We're seeking an IT Automation Engineer to be at the forefront of our IT Operations evolution— replacing manual toil with code, durable serverless workflows, and reliable integrations across Microsoft 365, Azure, Freshservice, Jira, and our line-of-business platforms (AlertBus, Console, NetSuite, OpenPath, Five9, Tableau, Ashby, and more).
You will lead the design, build, and operation of these automations end-to-end — a hands-on engineering role embedded in the IT Service Operations & Enablement (ITSOE) team. You will own production Azure Function Apps, Azure Automation runbooks, Power Automate flows, and Playwright-driven web automations that replace manual, repeatable processes in IT operations.
You’ll collaborate with ITSOE leadership, service desk agents, and business partners to identify high-volume, manual work and replace it with reliable, observable, well-tested automations — moving the team from reactive ticket processing to proactive platform enablement
Key Responsibilities
Design, build, deploy, and support secure IT automations across Azure, Power Platform, and related enterprise platforms using least-privilege and production-ready standards.
Develop and maintain automation solutions using TypeScript/Node.js, PowerShell, and Python, selecting the right toolset for each use case.
Administer and optimize Azure services that support automation, including Function Apps, Automation Accounts, Logic Apps, Storage, Key Vault, Service Bus, and monitoring tools.
Build and support event-driven, scheduled, and API-based workflows that improve IT service delivery, onboarding, offboarding, access management, and audit processes.
Create and maintain integrations across core business systems such as Freshservice, Jira, Microsoft 365, Entra ID, SharePoint, and other SaaS platforms.
Perform ticket and operational data analysis to identify high-value automation opportunities by evaluating volume, repeatability, business impact, process stability, and technical feasibility.
Use data insights to recommend and prioritize automation candidates that reduce manual effort, improve cycle time, and strengthen service quality.
Apply sound engineering practices including testing, source control, CI/CD, logging, error handling, documentation, and reusable design patterns.
Monitor automation health and performance through dashboards, telemetry, alerting, and trend analysis, and continuously improve reliability and business outcomes.
Establish and document standards for selecting the appropriate automation runtime, architecture, and support model for each workflow.
Partner with Service Desk and IT Operations teams to refine processes, reduce operational friction, and mentor others in automation best practices.
Preferred Qualifications
3+ years building production automations in an internal IT, IT Ops, or Service Desk engineering context (L2/L3 or beyond).
Strong hands-on experience with TypeScript / Node.js and Azure Function Apps, including:
Durable Functions (orchestrators, activities, fan-out/fan-in, sub-orchestrations, eternal orchestrations).
HTTP, Timer, Queue, Service Bus, and Blob triggers.
Retry policies, exponential backoff, idempotent activities, and dead-lettering.
Production experience with Playwright (Node.js / TypeScript), including:
Microsoft SSO / Entra login flows and stored auth state.
Page Object Model, role-based locators, trace/video capture.
Running at scale via Microsoft Playwright Workspaces or equivalent (Azure Container Apps, self-hosted runners).
Strong Power Automate (cloud flows) skills — SharePoint, Outlook, Teams, HTTP with Entra ID, Dataverse, custom connectors, approvals, and scheduled flows.
Hands-on with Azure Automation runbooks (PowerShell 7 and/or Python), including webhooks, schedules, hybrid workers, and shared modules.
Working knowledge of Microsoft Graph API (SharePoint site usage, Entra ID users/groups, license assignment, mail, calendar) and Azure Blob Storage (lifecycle policies, SAS, Managed Identity access).
REST API integration experience with Freshservice and Jira Cloud — auth, pagination, custom fields, custom objects, webhooks, and the Freshservice Service Catalog.
Nice to Have
Logic Apps Standard for stateful, connector-heavy orchestrations.
Azure Service Bus / Event Grid for cross-platform event fan-out.
Application Insights + Log Analytics (KQL) dashboards and alerting; Azure Workbooks authoring.
Power Apps (canvas + model-driven) and Dataverse for self-service portals and structured ops data.
Azure Document Intelligence / Form Recognizer for OCR pipelines on inbound mail or citation documents.
Microsoft 365 admin depth: Entra ID lifecycle workflows, conditional access, Intune device compliance, SharePoint admin, Exchange Online, Teams.
Freshservice Workflow Automator, Custom Objects, Onboarding/Offboarding modules, and Freshservice Analytics.
Integrations with Ashby, NetSuite, Salesforce, Tableau, OpenPath, Five9, or 1Password via API or SCIM.
Cross-platform observability tooling.
Why Join Us
Be part of a mission-driven company making roads safer for students and communities.
Help architect the future of our Automated Safety Platform.
Work on modern, cloud-native, and serverless technologies.
Collaborate with a global, inclusive, and high-performing team.
Compensation Range: $70K - $80K
See All 239+ Mid Level Security Operations Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsMid Level Security Operations Engineer Job Market
Who's Hiring
- Amazon25
- Brex6
- Paylocity6
- The Home Depot5
- Whatnot4
Top Industries Hiring
- Technology & Software68
- Retail40
- E-Commerce & Online Marketplaces27
- Consulting & Professional Services17
- Healthcare & Medical Services13
Mid Level Security Operations Engineer Jobs: Frequently Asked Questions
How do I get a mid level security operations engineer job?
Position your experience around ownership, not just participation. Highlight incidents you led end to end, detections you tuned, or playbooks you built from scratch. Mid level hiring managers want to see that you can triage independently, communicate findings clearly to stakeholders, and improve the team's processes, not just execute tickets handed to you. Certifications like Security+, CySA+, or GIAC credentials help your application stand out.
Which companies hire mid level security operations engineers?
Companies hiring mid level security operations engineers right now include Amazon, Brex, and Paylocity, based on current listings on Migrate Mate as of June 2026. Hiring at this level comes from a wide range of employers, including large enterprises building out their internal SOC teams, mid-size technology firms scaling their detection and response capabilities, and managed security service providers looking for analysts ready to work with limited supervision.
Are there remote mid level security operations engineer jobs?
Yes, remote and hybrid options are a real part of this market. About 33% of mid level security operations engineer openings are remote or hybrid as of June 2026, reflecting how many security teams now operate across distributed environments. On-site roles remain common where compliance requirements or sensitive infrastructure demand physical presence, so filtering by work setting is a practical first step when you search current openings.
How do I move up to a mid level security operations engineer role?
The path from entry level to mid level is built on demonstrated ownership over time. Early on, focus on mastering your SIEM, sharpening triage instincts, and learning the full incident lifecycle from detection through remediation. As you grow, take on projects where you write the detection logic, improve response playbooks, or mentor newer analysts. Employers promote or hire into mid level roles when they see measurable impact, not just time served.
Which industries hire the most mid level security operations engineers?
Mid Level security operations engineer roles concentrate in Technology & Software, Retail, and E-Commerce & Online Marketplaces, based on current listings on Migrate Mate as of June 2026. These sectors drive consistent hiring because they operate complex infrastructure, face significant regulatory pressure around data protection, and require security teams capable of handling a high volume and variety of threats with increasing independence at the mid level.