Senior Threat Response Engineer

Role Description

We are looking for a Senior Threat Response Engineer to join our team. This is a Remote (USA Only) role, reporting to the Senior Manager, Threat Response Engineering in the ZSS - Security Services department. In this position, you will be responsible for responding to confirmed compromises on customer endpoints subscribed to the Active Remediation MDR service.

What you’ll do (Role Expectations)

• Perform investigations into detected threats and leverage security products to analyze, contain, and remediate threats in customer environments.
• Provide customers with thorough reports of actions taken to ensure clarity on environment cleanup and protection strategies.
• Identify and implement effective response strategies to further enhance the security posture of the customer base.
• Collaborate with Detection Engineering, Threat Hunting, Intel, and Product teams to develop innovative methods for timely threat remediation.
• Prioritize and execute tasks effectively in a fast-paced operational environment while participating in a 24x7 on-call rotation.

Qualifications

• Very strong analytical and problem-solving skills demonstrated through direct experience responding to security events and threats.
• Mastery of Endpoint Detection and Response (EDR) products including CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or CarbonBlack.
• Deep understanding of internal system functionality for Windows and MacOS operating systems.
• Demonstrated understanding and experience with AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving.
• Professional and articulate communication skills with the ability to provide clear technical documentation.
• Ability to work Monday - Friday 8:00am - 4:00pm MT and ability to participate in a recurring, monthly on-call rotation.

Requirements

• Strong understanding of security operations, enterprise technology, and network controls or protocols.
• Experience utilizing AI-augmented development platforms to drive security automation, with a demonstrated capability to proactively refine or engineer new AI-based solutions that enhance operational velocity and tool efficacy.
• Understanding of current and emerging adversary tactics and techniques, and the ability to practically apply this knowledge.

Benefits

• Various health plans.
• Time off plans for vacation and sick time.
• Parental leave options.
• Retirement options.
• Education reimbursement.
• In-office perks, and more!