Staff Security Software Engineer, Detection & Response

This is a fully remote position, open to applicants in United States.

📋 Description

• Serve as the senior technical expert for the Detection & Response Team

• Identify capability gaps and assist in shaping the team’s strategy and roadmap

• Enhance the detection engineering program and spearhead initiatives to develop new capabilities

• Create alerts and automation workflows to identify and address both external and internal security threats

• Oversee logging pipelines and related infrastructure, as well as integrate new logging sources

• Design and sustain internal tools to broaden and automate detection and response capabilities

• Address alerts and lead incidents as part of an on-call rotation

• Collaborate with cross-functional security and engineering teams

• Investigate previously undetected threats

• Utilize AI to enhance the efficiency, accuracy, and scope of security engineering

⛳️ Requirements

• Extensive and in-depth knowledge of intrusion detection and incident response in a contemporary, cloud-first environment

• Understanding of the attacker lifecycle, prevalent attack techniques, and detection strategies

• Practical experience in writing SIEM queries for alerting, response, and threat hunting

• Experience in leveraging threat intelligence to enhance detection capabilities

• Familiarity with EDR, Osquery, and firewall logs for conducting threat investigations

• Knowledge of networking technologies and/or network security, including fundamental TCP/IP concepts

• Proficiency in macOS internals, or alternatively Linux/UNIX or Windows internals, encompassing persistence mechanisms and privilege escalation techniques

• Experience in scripting or automation using Python, Go, or Ruby

• Proven ability to employ AI to enhance efficiency and quality in daily workflows

• Strong history of evaluating and validating AI-assisted tasks

• High ethical standards and a sense of ownership when safeguarding sensitive data and making critical decisions

• Bachelor’s degree in Computer Science, Cybersecurity, a related field, or equivalent professional experience

🏝️ Benefits

• Eligibility for equity

• Flexible working model / PinFlex

• Opportunities for in-person collaboration 1–2 times every 6 months

• Commitment to equal opportunity employment

• Support for medical or religious accommodations during the application process