Security Engineer, Detection & Response

You will lead security incident response from triage through recovery and postmortems. You will build and operate telemetry pipelines, create and maintain detections, conduct threat hunting, run threat intelligence activities, automate response workflows, and develop incident-response plans and exercises. You will collaborate on detecting AI-specific threats and participate in the security incident on-call rotation.

Responsibilities

• Lead incident response through triage, scoping, containment, eradication, recovery, and postmortems
• Design, build, and operate security data pipelines and detection tooling
• Author, deploy, and maintain detections across SIEM, endpoint, cloud, and security tooling
• Track relevant threat actors and campaigns and turn intelligence into hunts, detections, and hardening recommendations
• Hunt proactively for threats and build automation and response tooling
• Detect AI-specific threats in production
• Develop and exercise incident response plans, on-call processes, and tabletop exercises
• Participate in an on-call pager rotation for security incidents

Requirements

• Bachelor’s degree or equivalent experience in computer science, engineering, or a similar field
• Proficiency in Python or Rust
• Experience responding to production security incidents and leading investigations
• Experience building and operating security data pipelines at scale
• Experience with threat intelligence, adversary TTPs, MITRE ATT&CK, detections, and hunts
• Understanding of cloud environments, Kubernetes, identity provider telemetry, and attacker movement
• Familiarity with host and network forensics
• Ability to own projects end to end
• Clear technical and non-technical communication

Benefits

• Health benefits
• Dental benefits
• Vision benefits
• Unlimited PTO
• Paid parental leave
• Relocation support