Security Engineer, Detection Response

Overview

Security Engineer for Detection Response, responsible for corporate security posture, anomaly monitoring, detection and visibility build-out, and ensuring security of internal systems.

What you'll do

• Monitor and respond to security alerts across multiple channels, including managed SOC escalations.
• Maintain visibility and logging infrastructure and ensure SIEM operations.
• Support security audits for PCI, SOC2, ISO, and other compliance frameworks.
• Develop and deploy new detections, security tooling, and manage key security partners.
• Handle security investigations, incidents, urgent requests, and improve the on-call process.
• Manage and enhance email security, endpoint security posture, GitHub administration best practices, and internal security tooling.

What you'll need

• Extensive experience in security operations, including SIEM management, security logging, and detection engineering.
• Strong knowledge of AWS infrastructure and cloud security best practices.
• Experience with GitHub administration and security controls.
• Proficiency in SQL for data analysis and security investigations.
• Hands-on incident response experience covering detection, triage, and remediation.
• Strong endpoint management skills across Mac, Windows, and Linux.
• Proficiency in at least one scripting language (Python, Bash) and one compiled language (Rust, Go).

Details

• Role is in-office on Monday, Tuesday, and Friday if within commuting distance of SF, NY, London, or Berlin; otherwise fully remote.