Security Engineer

This is a fully remote position, open to applicants in California.

📋 Description

• Optimize Upwind's detection and response systems.

• Perform proactive assessments of customer environments to uncover risks and vulnerable attack surfaces, and suggest enhancements.

• Spearhead thorough security investigations related to supply chain, API, malware, and runtime attack scenarios.

• Record the results of investigations and create playbooks to bolster future detection and response efforts.

• Collaborate with Security Analysts, Research, and Backend teams to improve detection efficacy.

• Manage complex or critical incidents escalated from Tier 1/2, including direct interactions with customers.

• Engage in regular customer meetings and translate security insights into clear, actionable recommendations.

• Keep abreast of emerging threats, attack methods, attack surfaces, and best practices in cloud security.

• Assist in the development and training of AI-driven detection models utilizing machine learning to enhance investigation precision and response efficiency.

• Take independent responsibility for U.S. hours as the inaugural U.S. member of the Security team.

⛳️ Requirements

• Visa sponsorship is not offered.

• Participation in a shared on-call rotation is required, including availability for nights, weekends, or holidays during the assigned week.

• Substantial hands-on experience in cybersecurity, preferably from a leading cloud or cloud security organization, with practical exposure to cloud environments.

• Strong understanding of detection engineering, incident response, and threat analysis.

• Ability to articulate supply chain, API, malware, and runtime attack techniques in detail.

• Practical experience with at least one major cloud platform: AWS, GCP, or Azure.

• Familiarity with container technologies such as Docker/Kubernetes.

• Hands-on experience with Linux; knowledge of Windows is advantageous.

• Understanding of networking basics and scripting languages: Python/Bash.

• Excellent communication and presentation skills, with a proven track record of engaging directly with customers and maintaining composure under pressure or pushback.

• Self-motivated and capable of working independently in a dynamic, high-responsibility startup environment.

• A curious and problem-solving mindset, along with a genuine personal interest in security beyond professional duties.

• A B.Sc. in Computer Science or Information Security is a plus.

🏝️ Benefits

• Participation in a shared on-call rotation with expected availability for nights, weekends, or holidays during the assigned week.

• A clear pathway toward technical or team leadership as the U.S. presence expands.