Senior Security Engineer, Incident Response

What you'll do

• Lead the technical response to security events across global infrastructure, services, and applications.
• Conduct triage, containment, and remediation for security incidents while driving post-incident improvements.
• Create and document standard operating procedures, runbooks, and best practices for internal teams.
• Automate manual security processes using SOAR tools and other technical solutions.
• Participate in an on-call rotation and conduct root cause analyses (RCAs) for security incidents.
• Utilize AI and LLM-based tools to interpret alerts, reduce false positives, and contextualize threat data.
• Monitor threat intelligence and vendor data to proactively defend against emerging risks.
• Mentor team members and provide support to facilitate long-term career development and success.

What we're looking for

• Must have 5+ years of security incident response experience in a production-cloud environment.
• Must be a subject-matter expert on security issues and technologies.
• Ability to utilize AI for complex security incident response activities and high-fidelity detections.
• Advanced knowledge of service-oriented architectures and cloud-based security tools.
• Experience working across a technology stack on difficult security challenges.
• Experience with SIEM platforms, including the ability to extend their functionality.
• Experience with SOAR tools and automating manual security processes.
• Experience in AWS, GCP, or other large cloud platforms.
• Excellent written and verbal communication skills.
• Ability to influence and build effective working relationships across all levels of the organization.
• AI Model Security & Posture Management (preferred).
• AI-Driven Threat Response using GenAI and LLM-based security use cases (preferred).
• Artifact & Evidence Triage for malware, trojans, and source code analysis (preferred).
• Threat Intelligence Integration to analyze trends and defend against emerging risks (preferred).