Senior Security Engineer, Detection & Response

This is a fully remote position, open to applicants in California.

📋 Description

• Oversee complex, high-stakes security incidents from the initial assessment stage through to containment, recovery, and closure.

• Examine threats across various domains including endpoint, identity, cloud, SaaS, network, and application systems.

• Facilitate containment and remediation efforts with system owners while balancing urgency, evidence preservation, and the impact on business operations.

• Reconstruct timelines, maintain evidence integrity, and assess the scope and impact of incidents.

• Ensure clarity regarding incident priorities, decisions, ownership, and handoffs across teams and time zones.

• Conduct post-incident reviews and communicate findings, uncertainties, and response decisions to both technical teams and business partners.

• Develop code, queries, and automation to expedite the processes of evidence collection, analysis, and response.

• Collaborate with triage, detection, threat intelligence, and infrastructure teams to address gaps in telemetry, enhance detection capabilities, and reduce repetitive manual tasks.

• Mentor incident responders.

• Engage in the incident response on-call rotation.

⛳️ Requirements

• A minimum of 6 years of practical experience in incident response and digital forensics.

• Proven experience in leading significant security incidents that involve multiple teams and competing priorities.

• Comprehensive understanding of attacker behavior.

• Proficiency in several domains of security including identity, endpoint, cloud, network, or application security.

• Solid understanding of SQL/databases and strong log-analysis skills.

• Practical skills in programming or scripting languages, such as Python.

• Ability to analyze large, complex datasets and create reliable tools, with or without the use of AI.

• Established workflows that incorporate AI assistance.

• Experience in developing AI-driven systems and processes that enhance incident coordination and case management.

• Excellent communication skills and sound judgment when interacting with technical teams, executives, and sensitive information.

• Engineering mindset with a proven track record of translating incident response lessons into sustainable improvements.

• Willingness and capability to develop systems and workflows that enhance incident response and integrate with investigation, automation, and case management functions.

• Participation in the incident response on-call rotation.

🏝️ Benefits

• Remote work opportunities.

• Comprehensive medical insurance.

• Flexible time-off policies.

• Retirement savings plans.

• Modern family planning benefits.