---
title: 'Staff Security Engineer, Security Operations at GoodLeap'
canonical: 'https://feeny.ai/job/staff-security-engineer-security-operations-goodleap-roseville-vsqsf01z9ash'
type: 'job'
last_seen: '2026-10-29'
---

# Staff Security Engineer, Security Operations at GoodLeap

- **Company:** GoodLeap
- **Location:** Roseville, CA / HQ
- **Compensation:** $167k–$213k
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-21
- **Last confirmed live:** 2026-10-29
- **Apply:** https://jobs.lever.co/goodleap/e5909011-8f57-4a50-a0e2-578e31b6f114

## Job description

About GoodLeap: GoodLeap is a technology company delivering best-in-class financing and software products for sustainable solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more. Over 1 million homeowners have benefited from our simple, fast, and frictionless technology that makes the adoption of these products more affordable, accessible, and easier to understand. Thousands of professionals deploying home efficiency and solar solutions rely on GoodLeap’s proprietary, AI-powered applications and developer tools to drive more transparent customer communication, deeper business intelligence, and streamlined payment and operations. Our platform has led to more than $30 billion in financing for sustainable solutions since 2018.

GoodLeap is also proud to support our award-winning nonprofit, GivePower, which is building and deploying life-saving water and clean electricity systems, changing the lives of more than 1.6 million people across Africa, Asia, and South America.

Position Summary The Staff Security Engineer, Security Operations is responsible for protecting GoodLeap’s cloud environments, applications, endpoints, and corporate systems through detection engineering, incident response, and security operations. This role builds and tunes detections, leads investigation and response for security incidents, and manages the security tooling that provides visibility across cloud, identity, endpoint, and email. The Staff Security Engineer will design and build AI agents and automation that reduce time-to-detect and time-to-respond, and will establish monitoring of AI activity across the enterprise, including AI tools, agents, and integrations used by employees and engineering teams. This role works closely with software engineers, infrastructure, IT, and compliance partners to ensure security controls are consistently applied and operationally effective. Additionally, the Staff Security Engineer develops security requirements, conducts security risk assessments, evaluates security services and technologies, maintains incident response plans and runbooks, and provides mentoring to the security team and partner engineering teams. This role will own endpoint detection and response (CrowdStrike) and email security as these capabilities are brought into the security function.

Essential Job Duties and Responsibilities

Detection Engineering & Monitoring

- Design, build, test, and tune detections across cloud, identity, endpoint, and email telemetry using detection-as-code practices mapped to MITRE ATT&CK.
- Manage security logging, SIEM, and alerting pipelines.
- Establish monitoring of AI activity, including AI tools, agents, MCP integrations, and API keys, to detect data exposure, misuse, and anomalous behavior.
- Reduce time-to-detect through applied threat intelligence and sensor enrichment.

Incident Response

- Lead investigation, containment, eradication, and recovery for security incidents.
- Serve as incident lead for significant events and coordinate with legal, compliance, and leadership on regulatory notification obligations.
- Maintain incident response plans, playbooks, and runbooks.
- Conduct tabletop exercises and post-incident reviews that drive lasting control improvements.

Security Tooling, Automation & AI Agents

- Deploy and manage the security operations toolset, including cloud security monitoring, WAF, DDoS protection, IDS, EDR (CrowdStrike), and email security.
- Build AI agents and automation for alert triage, enrichment, investigation, and response.
- Review results from vulnerability scans, penetration testing, and other sources for true positives and propose remediation or mitigating controls.
- Serve as a subject matter expert (SME) on AWS cloud security and consult on the secure design of cloud-based systems.

Mentorship & Leadership

- Provide mentorship and guidance to the security team and partner engineering teams on detection, response, and security operations practices.
- Share in-depth understanding of company and industry methodologies, policies, standards, and controls.
- Help build the security team and lead efforts to mature GoodLeap’s security operations capability.

Required Skills, Knowledge and Abilities

- In-depth knowledge of Amazon AWS, including security configuration, logging, and tooling (e.g., CloudTrail, GuardDuty, Security Hub).
- Hands-on experience in detection engineering, including SIEM query languages and detection-as-code.
- Hands-on experience in incident response, including log analysis and host and cloud investigation.
- Familiar with the MITRE ATT&CK framework and OWASP Top 10.
- Knowledge of network and web related protocols (e.g., TCP/IP, DNS, HTTP, HTTPS, TLS).
- Experience with, or ability to quickly ramp on, EDR platforms (CrowdStrike Falcon preferred).
- Experience with, or ability to quickly ramp on, email security (phishing, BEC, DMARC/SPF/DKIM).
- Experience building automation in Python or a similar language.
- Experience building or integrating LLM-based agents and workflows.
- Understanding of AI-specific risks such as prompt injection, data leakage, and excessive agent permissions.
- Experience working in a SOC 2, PCI-DSS, or ISO control environment.
- Proven ability to combine business acumen, technical acumen, and process expertise to assess requirements and alignment.
- Strong communicator across verbal, written, ticketing, and messaging channels.
- Able to prioritize and deliver on multiple tasks independently with a strong bias toward action in a fast-paced environment.
- GCIH, GCFA, GCDA, CCSP, CISSP, CrowdStrike, or comparable certifications are a plus.

Additional Information Regarding Job Duties and Job Descriptions:

Job duties include additional responsibilities as assigned by one's supervisor or other managers related to the position/department. This job description is meant to describe the general nature and level of work being performed; it is not intended to be construed as an exhaustive list of all responsibilities, duties and other skills required for the position. The Company reserves the right at any time with or without notice to alter or change job responsibilities, reassign or transfer job position or assign additional job responsibilities, subject to applicable law. The Company shall provide reasonable accommodations of known disabilities to enable a qualified applicant or employee to apply for employment, perform the essential functions of the job, or enjoy the benefits and privileges of employment as required by the law.

If you are an extraordinary professional who thrives in a collaborative work culture and values a rewarding career, then we want to work with you!  Apply today!

We are committed to protecting your privacy. To learn more about how we collect, use, and safeguard your personal information during the application process, please review our Employment Privacy Policy and Recruiting Policy on AI.

## About GoodLeap

## Company Overview
- **One-liner**: GoodLeap is a technology company delivering best-in-class financing and software products for sustainable home solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more.
- **Entity Type**: Private
- **Headquarters**: Roseville, CA, USA
- **Founded**: 2018 (based on platform financing history) [goodleap.com/about-us](https://www.goodleap.com/about-us)
- **Founders**: Not publicly available

## Core Business
- **Primary industry/industries**: Sustainable home improvement financing, fintech, clean energy software
- **Target customers**: B2B (contractors, installers) and B2C (homeowners)
- **Mission**: To connect a world in which everyone can live sustainably [goodleap.com/about-us](https://www.goodleap.com/about-us)

## Products & Services
- **[GoodLeap Home App]**: A mobile app for homeowners to manage financing, monitor solar/system performance, make payments, and access rewards.
- **[Financing]**: Point-of-sale loans for solar, batteries, HVAC, roofing, windows, and other efficiency upgrades.
- **[Contractor Apps (GoodLeap Pros / Origin)]**: Mobile and desktop applications for contractors to manage financing pipelines, payments, and customer communication.
- **[DeDe AI Agent]**: AI-powered assistant that helps contractors streamline operations and customer engagement.
- **[Payment Solutions]**: Includes the GoodLeap Home Visa Signature Card (issued by Cross River Bank) and other payment tools.
- **[Developer Platform]**: No/low-code applications, full APIs, and integrations for developers to embed financing and software capabilities.

## Market Standing
- **Valuation/Market Cap**: Not publicly available
- **Key Metric**: Cumulative volume financed to date: over $64B (home page) / $30B since 2018 (about page) [goodleap.com](https://www.goodleap.com/) and [goodleap.com/about-us](https://www.goodleap.com/about-us)
- **Notable Investors/Partners**: Not publicly disclosed (card partner: Cross River Bank)
- **Growth Signals**:
  - Over 1.7 million homeowners financed (home page)
  - Over 6,800 contractors using the platform
  - Approximately 1,400 employees [goodleap.com/careers](https://www.goodleap.com/careers)
  - Operations in all 50 states with offices in Austin, San Francisco, Irvine, Roseville HQ, Scottsdale, Dallas, Bentonville, West Palm Beach
  - 20+ years in business (predecessor experience)

## Competitive Advantages
- **Integrated ecosystem**: Combines financing, contractor software, AI tools, and developer APIs in one platform, reducing friction for both homeowners and installers.
- **Scale and network effects**: Large base of contractors and homeowners creates a virtuous cycle; more contractors attract more homeowners and vice versa.
- **Sustainability focus**: Strong alignment with the growing demand for energy-efficient home upgrades and solar adoption.
- **Longevity and experience**: Over two decades of market presence in home improvement financing.

## Strategic Focus
- Expand financing options for a broader range of sustainable home solutions (HVAC, roofing, windows).
- Deepen AI capabilities (e.g., DeDe AI Agent) to improve contractor efficiency and homeowner experience.
- Grow the Virtual Power Plant program to aggregate home battery systems for grid services.
- Scale developer platform to integrate with more third-party systems.

## Why Work Here
- **Culture**: Employee reviews on Indeed highlight a “great culture, co-workers, and management” with collaborative environment and full paid training [indeed.com](https://www.indeed.com/cmp/Goodleap/reviews).
- **Remote/Hybrid policy**: Many roles are remote-first (e.g., Business Development Manager, Senior Associate – Business Solutions); some roles require on-site presence (e.g., Home Equity Specialist in select offices) [jobs.lever.co/goodleap](https://jobs.lever.co/goodleap).
- **Benefits**: Comprehensive healthcare (medical, dental, vision), 401(k) with matching, life and disability insurance, paid time off, and leave plans [goodleap.com/careers](https://www.goodleap.com/careers).
- **Notable perks**: Opportunity to work on impactful sustainability products; dynamic office locations; employee base of 1,400+ across the U.S.

## Sources
1. [goodleap.com](https://www.goodleap.com/)
2. [goodleap.com/about-us](https://www.goodleap.com/about-us)
3. [goodleap.com/careers](https://www.goodleap.com/careers)
4. [jobs.lever.co/goodleap](https://jobs.lever.co/goodleap)
5. [indeed.com](https://www.indeed.com/cmp/Goodleap/reviews)

## Other roles at GoodLeap

- [Senior Software Engineer, Payments](https://feeny.ai/job/senior-software-engineer-payments-goodleap-roseville-nr5h38y3sex6) — Roseville, CA / HQ
- [Customer Care Advisor](https://feeny.ai/job/customer-care-advisor-goodleap-west-roseville-1h6aqckvvr2q) — West Roseville, CA
- [Credit Strategy & Decisioning Manager](https://feeny.ai/job/credit-strategy-decisioning-manager-goodleap-san-francisco-q4t1cbvndbwe) — San Francisco, CA
- [Senior Analyst, Strategic Initiatives](https://feeny.ai/job/senior-analyst-strategic-initiatives-goodleap-west-palm-beach-d5ez5rgjaz5j) — West Palm Beach, FL
- [Collections Specialist](https://feeny.ai/job/collections-specialist-goodleap-united-states-sbja14j3tfte) — United States
- [Bilingual Collections Specialist](https://feeny.ai/job/bilingual-collections-specialist-goodleap-united-states-nk5qg42apxh5) — United States
- [Bilingual Collections Specialist](https://feeny.ai/job/bilingual-collections-specialist-goodleap-mexico-city-h36vfchbm7ve) — Mexico City, Mexico
- [Assistant General Counsel, Servicing](https://feeny.ai/job/assistant-general-counsel-servicing-goodleap-united-states-h3az34ngvqm9) — United States
- [Contact Center Manager](https://feeny.ai/job/contact-center-manager-goodleap-west-roseville-x0nkxzhr41m1) — West Roseville, CA
- [Senior Contact Center Manager](https://feeny.ai/job/senior-contact-center-manager-goodleap-west-roseville-hqdrzp922mzh) — West Roseville, CA