Security Engineer, Detection and Response

Responsibilities

• Design, pilot, and implement centralized logging and alerting systems across endpoints, networks, labs, and cloud environments.
• Develop threat-hunting tools and automation for threat detection and incident response.
• Investigate alerting-pipeline events, triage potential incidents, and drive response during active incidents.
• Analyze adversary tactics, techniques, and procedures and build threat intelligence on APT and cybercrime actors.
• Collaborate with internal and external stakeholders across the company.

Requirements

• Experience in several security detection and response areas, including digital forensics, malware analysis, incident management, host or network intrusion detection, and threat intelligence.
• Demonstrated threat-hunting experience and ability to develop automated detection and incident-response logic.
• Practical experience with a BeyondCorp model.
• Strong software engineering skills in C, C++, Rust, Go, Python, or a similar language.
• Knowledge of Linux, Windows, and macOS internals and experience detecting threats in Azure, GCP, and AWS environments.
• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.
• 6+ years of experience in security monitoring or a related security role.
• Excellent verbal and written communication skills and strong attention to detail.

Benefits

• Full-time position requiring five days per week of in-office collaboration in San Jose, California.
• Additional compensation and benefits may be included depending on the specific role.