Security Engineer – Detection & Response

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and enhance detection methods, logging procedures, telemetry coverage, and security tools.

• Optimize SIEM/ETL pipelines to achieve real-time insights into anomalous and malicious behaviors.

• Conduct incident response activities, engage in threat hunting, and perform threat modeling.

• Enhance incident-response workflows and associated documentation.

• Deploy suitable security automation and AI tools.

• Evaluate security alerts to differentiate between significant threats and false alarms.

• Take part in the security on-call rotation.

• Create runbooks and document detections, logging capabilities, response protocols, and threat intelligence.

• Support security education initiatives and foster collaboration across engineering teams.

• Provide mentorship to colleagues.

⛳️ Requirements

• 1–2+ years of specialized experience in security response and automation OR a background in security-related engineering.

• 4–5+ years in DevOps, IT, software engineering, or a related field, with defined security responsibilities or overlap.

• Proficient in scripting or coding to develop and automate tools.

• Familiarity with logging, detection, or observability platforms in cloud or distributed settings.

• Strong judgment in the context of AI and automation.

• Capability to operate with high autonomy in an asynchronous environment.

• Excellent collaboration skills with both technical and non-technical teams.

• Driven by Headway’s mission.

• Proficiency in Python 3 and TypeScript.

• Experience with AWS infrastructure, including Fargate, ECS, and S3.

• Knowledge of PostgreSQL and Snowflake.

• Familiar with Datadog and PagerDuty.

• Experience using GitHub.

• Background in security tools such as Anthropic, Wiz, Semgrep, and Tines.

• Must have authorization to work in the United States for any employer.

• Optional: experience in regulated environments, automation/SOAR tools, Detection-as-Code or Infrastructure-as-Code, risk-based detections, threat modeling, or alert-pipeline experience.

🏝️ Benefits

• Medical, dental, and vision insurance.

• HSA/FSA options.

• 401(k) plan with matching contributions for 2027.

• Carrot Fertility reimbursement.

• Paid parental leave.

• Paid medical leave.

• Paid caregiver leave.

• Equity opportunities.

• Health and wellness benefits.

• Retirement savings plans.

• Significant ownership opportunities through equity.