Senior Security Engineer, Threat Detection and Response
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security Engineer investigating threats, building detection automation, and improving incident response. Supporting U.S.-based corporate and production environments through security engineering and threat hunting.
Responsibilities:
- Investigate security incidents using digital forensics and data analysis
- Proactively hunt for threats and unusual activity across corporate and production environments
- Build automation and detection models to identify unusual activity and speed up response at scale
- Work with engineering teams to design and deliver advanced detection solutions
- Identify infrastructure visibility gaps and partner to close them through improved logging and detection
- Lead complex investigations with Legal, Privacy, Engineering, and other cross-functional partners
- Use incident lessons and root cause analysis to drive lasting security improvements
- Mentor team members and help define detection and response processes
- Detect, investigate, and respond to internal and external security threats
- Shape and execute the team’s detection and incident response strategy
Requirements:
- 5+ years of hands-on experience in security operations, including investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, or detection engineering
- Proficiency in Python or another scripting language
- Experience automating security detection and response
- Working knowledge of the Cyber Kill Chain and MITRE ATT&CK frameworks and their application to the current threat landscape
- Ability to lead through influence in complex, ambiguous situations
- Ability to stay calm, collaborative, and decisive in high-pressure situations
- Strong organization, prioritization, and multitasking skills
- Self-motivated, creative problem-solver who works well independently
- Familiarity with Elasticsearch preferred
- Experience with AWS services such as EC2, S3, Lambda, and RDS preferred
- Must be authorized to work in the U.S. without sponsorship
Benefits:
- Benefits
- Full-time, 40 hours per week (Monday-Friday)
Similar Jobs
Staff Security Engineer, Security Enablement
Staff Security Engineer designing DoorDash’s global physical and cloud security systems. Leading multi-team programs, AWS infrastructure, security integrations, and enterprise risk reduction.
Cybersecurity Intern
Cybersecurity Intern gaining hands-on experience in security operations, vulnerability management, and incident response. Supporting cybersecurity projects at global electronics manufacturer Kimball Electronics.
Ethical Hacker – Penetration Tester
Pentester conduzindo avaliações ofensivas em infraestrutura, aplicações, redes Wi-Fi e soluções de IA. Grupo Trade Technology oferece tecnologia, segurança e transformação digital.
Staff Mobile Security Engineer
Staff Mobile Security Engineer securing MrBeast’s large-scale mobile media, gaming, and fintech experiences. Owning device integrity, fraud defense, and security engineering team growth.
Security Engineer
Security Engineer investigating high-impact incidents and building SIEM-based detections for Expleo, a global engineering and technology services provider. Remote role for candidates living in Portugal.
Information Security Officer
Information Security Officer maintaining Finom’s certified ISMS, risk framework, audits, and supplier assessments. Supporting compliance for the company’s European B2B financial platform.
Information Security Officer
Information Security Officer maintaining ISMS, audits, and ICT risk management for Finom’s European financial platform. Improving compliance through supplier assessments, reporting, automation, and regulatory monitoring.
Information Security Officer
Information Security Officer managing ISMS, audits, vendor assessments and ICT risk for Finom’s European financial platform. Reporting to the CISO and improving compliance through automation.
Application Security Architect
Application Security Architect securing NinjaOne’s unified IT operations platform. Leading threat modeling, secure architecture reviews, and security initiatives across software, cloud, infrastructure, and identity.
Security Consultant II
Security Consultant II leading Prolexic DDoS integration, testing, and project delivery. Advising Akamai customers on web security, mitigation, and long-term security strategy.
Senior Security Engineer, Enterprise Security
Senior Security Engineer engineering controls and automation for Databricks, the Data and AI company. Securing enterprise applications, identity, cloud, SaaS, and data systems.
Senior Security Researcher – Red Team
Senior Security Researcher conducting red-team operations against GenAI, deepfake, cloud, and voice-security systems. Strengthening Pindrop’s cybersecurity platform through offensive research and attack automation.
Security Advisor II, Falcon Complete
Security Advisor assessing Falcon environments and improving customer security posture. Guiding CrowdStrike Falcon Complete customers through remediation, reporting, and technical issue resolution.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security posture. Assessing Falcon environments, recommending remediation, and resolving customer issues.
Regional Sales Director – Identity Security
Regional Sales Director leading Cyera’s Pacific Northwest sales team. Building territory growth and exceeding quotas for Cyera’s AI and data security platform.
Information Security, Compliance & Internal Controls Manager – ISO 27001
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS-2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s AI-driven application and cloud security for media measurement platforms. Building automated DevSecOps guardrails, vulnerability remediation, and secure AWS development workflows.
Staff Software Engineer, Security Factory – Static Analysis
Staff software engineer directing GitLab's AI-assisted static analysis engine and SAST capabilities. Defining program-analysis architecture, trustworthy agent tooling, and security detection quality.
Cybersecurity Director
Cybersecurity Director leading Cummins’ global application, cloud, vulnerability, and penetration-testing security strategy. Translating technical findings into enterprise risk decisions and enabling secure Frontier AI adoption.
Azure Cloud & Security Engineer
Azure Cloud & Security Engineer building secure, scalable Azure infrastructure for CI&T’s enterprise AI transformation solutions. Managing Bicep IaC, Azure DevOps pipelines, Container Apps, KEDA autoscaling, and cloud security.