As a Security Engineer on the Detection and Response team, you will build and deploy robust systems to protect digital infrastructure while investigating suspicious activity as an incident responder. You will develop smart automation strategies to reduce manual alert triage, conduct detection engineering across endpoints and cloud environments, and perform end-to-end investigations involving digital forensics and malware analysis. The role requires proficiency in Python or Go, experience with BeyondCorp or ZeroTrust models, and knowledge of operating system internals for macOS, Windows, and Linux. You will also work with Kubernetes, Google Cloud Platform, and Amazon Web Services to secure production environments and corporate infrastructure. This position focuses on identifying and neutralizing threats through proactive project work, threat hunting, and participation in red team exercises to improve security capabilities across the company's ecosystem.
What does a Security Engineer earn?
Median $191650 from 86 postings across 39 companies.
Build, deploy, and maintain large-scale security systems across the company ecosystem.
Research and develop new tools to improve overall security capabilities.
Create automation strategies to reduce the manual effort required for alert triage.
Perform detection engineering to identify malicious activities across endpoints, networks, and cloud environments.
Investigate alerts end-to-end using digital forensics and malware analysis techniques.
Lead incident response efforts to neutralize intrusion attempts and suspicious activities.
Participate in red team exercises and threat simulations to identify security gaps.
What we're looking for
Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent experience in a related technical field.
3+ years of experience in incident response, detection engineering, or related security disciplines.
Strong programming skills in Python and/or Go.
Practical experience with BeyondCorp or ZeroTrust security models.
Expertise in at least one area including digital forensics, malware analysis, incident management, host/network intrusion detection, network telemetry, threat intelligence, or threat hunting.
Understanding of operating system internals for two or more systems including macOS, Windows, and Linux.
Advanced knowledge of cloud infrastructure, specifically building and deploying systems across two or more of Kubernetes, Google Cloud Platform, or Amazon Web Services.
Python
Go
AWS
Google Cloud Platform
Kubernetes
Linux
macOS
Windows
AI Tools
Digital Forensics
Malware Analysis
Incident Management
Threat Intelligence
BeyondCorp
Network Intrusion Detection