Specialty
Who is hiring is shown to signed-in users. Create a free account to see the employer and apply.
The role
The company is hiring a Senior Security Engineer on its security operations team, working as an incident responder across the company's products and services. You would act as incident commander and build detection, alerting and response playbooks for a 24/7 response capability.
What you will do
- Identify and respond to security incidents at global scale
- Act as incident commander through the full response lifecycle
- Design and maintain security alerts, automated actions, playbooks and escalation workflows for 24/7 incident response
- Run threat hunting and plan tools and processes against sophisticated threat actors
- Triage threat intelligence reports and manage the resulting workflows
- Take part in the on-call rotation
What they ask for
- 5+ years managing security incidents at global scale, or working in a SOC, PSIRT or CSIRT
- Expertise with SIEM systems such as ELK, BigQuery or Splunk, with Splunk preferred
- Hands-on experience with EDR tools and using endpoint telemetry to find root cause
- Experience with SOAR platforms such as Tines or Splunk SOAR
- Practical experience with cloud platforms such as GCP, AWS or Azure
- Strong communication and ability to work with diverse stakeholders
- Software development or engineering operations experience for consumer products is expected
What they offer
- Performance-based bonus plans
- Medical, dental and vision coverage
- Retirement contributions with immediate vesting
- Quarterly company-wide wellness days and a birthday day off
- One-time home office stipend
- Annual professional development budget
This is our own short reading of the posting. The full description, and anything that has changed since, is on the employer's careers page behind the apply button.