Senior Security Engineer, Threat Detection and Response
Location: Remote - Position Type: 12 + month contract to (hire + multi-extension capability) Rate: 125.00 /hr. negotiable Summary The Threat Detection and Response team (TDR) is focused on automating security detection, responding to security incidents, and working with partner teams to build capabilities that support the incident lifecycle. This is the front-line team that detects, investigates, and responds to internal and external security threats and malicious activity.
This is a key role to help define and execute our vision for threat detection and incident response capabilities and processes while mentoring other team members. As a senior engineer on the team, you will have a direct impact on building, optimizing, and growing security capabilities as you help deliver world-class threat detection and incident response.
The Difference You Will Make
Impact: Act as a key member of our growing Threat Detection & Response (TDR) team.
Innovation: Define and execute novel approaches to detecting, containing, and mitigating threats and incidents.
Growth: Partner with cross-functional teams across the organization to improve overall security driven by learnings and root-cause analysis of investigations, resulting in the removal of entire classes of problems.
A Typical Day
Investigations: Perform deep investigations of security incidents using your knowledge of digital forensics and data analytics.
Threat Hunting: Proactively hunt for threats in our corporate and production environments to identify anomalous activity, using your coding and analysis skills to respond at scale.
Automation: Build advanced automation and detection models to support the identification of anomalous activity and streamline response mitigation.
Collaboration: Work side-by-side with our engineering teams to build advanced detection solutions to help keep systems and information safe. Partner closely with cross-functional teams such as Legal, Privacy, and Engineering for efficient, large-scale incident response.
Visibility: Identify gaps in our infrastructure and work with business partners to gain visibility through logging and detection.
Your Expertise
Experience: 7+ years of hands-on, in-depth knowledge and technical experience in security operations—including investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, and/or detection engineering.
Technical Skills: Proficiency in Python or another scripting language. (We also use SQL and Pandas frequently). Familiarity with Elasticsearch is preferred.
Cloud Infrastructure: Experience in AWS services (EC2, S3, Lambda, RDS) is preferred. Note: We are not focused on specific tools, but we often utilize Python, AWS, SQL, and more.
Frameworks: Solid knowledge and familiarity with the Cyber Kill Chain Framework and the MITRE ATT&CK Framework, and how these apply to the modern threat landscape.
Core Competencies:
Self-motivated, creative problem-solver able to work independently with minimal guidance.
Ability to lead people in complex, ambiguous situations through influence rather than authority.
Ability to work calmly and collaboratively in critical, high-stress situations with expediency.
Outstanding organizational, prioritization, and multitasking skills.
Ready to take your career to new heights? Explore job opportunities around the bustling city of San Francisco, California. Known for its vibrant tech scene, picturesque views of the Golden Gate Bridge, diverse culinary offerings like the famous clam chowder in sourdough bread bowls at Fisherman's Wharf, and the artistic vibe of the iconic street art at Clarion Alley. Work-life balance flourishes with easy access to outdoor adventures like hiking in Muir Woods, catching a Giants game at Oracle Park, or browsing through the exhibits at the San Francisco Museum of Modern Art. Join us in San Francisco and discover the endless possibilities this innovative and charming city has to offer.
Are you sure you want to apply for this job?
Please take a moment to verify your personal information and resume are up-to-date before you apply.
