Security Engineer, Level 5, Detection & Response

What you'll do

• Design, pilot, and implement logging and alerting systems to detect malicious activity across endpoints, networks, and cloud environments.
• Build tools and devise automation strategies to improve threat hunting and incident response capabilities.
• Investigate events generated by the alerting pipeline and triage potential security incidents.
• Use AI tools and high-velocity engineering workflows to design and ship scalable, production-ready security services.
• Drive response efforts and work closely with multiple internal teams during active security incidents.
• Identify, analyze, and fingerprint threat intelligence regarding adversary tactics, techniques, and procedures (TTPs).

What we're looking for

• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.
• 6+ years of post-Bachelor’s security related experience; or Master’s degree in a technical field + 5+ years; or PhD + 2+ years.
• Proven experience in digital forensics, malware analysis, incident management, host/network intrusion detection, or threat intelligence.
• Strong development skills in Python and/or Go.
• Advanced knowledge of operating system internals and core competency in two or more of macOS, Windows, Linux, Kubernetes, AWS, or GCP.
• Proficiency in leveraging AI tools to streamline development while auditing output for architectural integrity and security risks.
• Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response (preferred).
• Practical experience in a BeyondCorp model (preferred).