Security Software Engineer II, Detection and Response

What you'll do

• Build alerts and automation workflows to detect and respond to internal and external security threats.
• Manage logging pipelines and infrastructure while onboarding new sources to improve detection coverage.
• Develop and maintain internal tooling to automate team detection and response capabilities.
• Respond to security alerts and manage incidents as part of an on-call rotation.
• Hunt for previously undetected threats within the corporate environment.
• Leverage AI to enhance the efficiency, accuracy, and coverage of security engineering tasks.

What we're looking for

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field or equivalent experience.
• Strong knowledge of intrusion detection and incident response with an engineering focus in a modern cloud-first environment.
• Knowledge of the attacker lifecycle, common attack techniques, and detection techniques.
• Hands-on experience writing SIEM queries for alerting, response, and threat hunting.
• Experience consuming threat intelligence to improve detection capabilities.
• Familiarity using multiple telemetry sources for threat investigations, such as EDR, Osquery, and Firewall logs.
• Understanding of networking technologies, network security, and basic TCP/IP fundamentals.
• Depth in MacOS internals, or alternatively in Linux/UNIX or Windows internals, persistence mechanisms, and privilege escalation techniques.
• Scripting or automation experience in Python, Go, or Ruby for tool development or integration.
• Demonstrated ability to use AI to improve speed and quality in day-to-day workflows.
• Strong track record of critical evaluation and verification of AI-assisted work.
• US based applicants only.