Security Engineer, Detect & Respond

Responsibilities

• Build and evolve high-signal detection and response capabilities across Betterment’s infrastructure.
• Improve detections using on-call feedback and false-positive trends.
• Bring SaaS application logs into the SIEM and coordinate with other teams.
• Participate in Security On Call cycles, alert triage, investigations, and containment.
• Administer SIEM lookups, integrations, and alert hygiene.
• Build automations that improve the on-call experience and reduce manual toil.
• Develop detection coverage and organizational visibility for AI tools, agents, connectors, prompt injection, non-human identities, and data movement.
• Review new systems and data sources to define telemetry and detection requirements before launch.
• Maintain incident-response playbooks and support ongoing response improvements.

Requirements

• 3+ years of experience in security operations or security engineering.
• Experience with SIEM and SOAR platforms, including writing searches and building alerts.
• Familiarity with attacker tactics and techniques and frameworks such as MITRE ATT&CK.
• Exposure to incident response, including alert triage, investigation, or containment.
• Programming or scripting experience and comfort reading and writing code.
• Enthusiasm for AI tools and workflows, with judgment to verify their output and introduce capabilities responsibly.
• Awareness of security issues involving AI systems, including agent and connector permissions, prompt injection, non-human identity, and data exfiltration through AI tools, or willingness to learn quickly.
• Familiarity with AWS and SaaS security tools such as CrowdStrike or Okta.
• Interest in building reliable, well-documented, maintainable security systems.
• Strong written communication skills, including the ability to write runbooks and explain security concepts to nontechnical colleagues.

Benefits

• Hybrid NYC-based position with four required in-office days per week and no required office days during summer and winter holidays.
• Medical, dental, vision, life, AD&D, short-term and long-term disability coverage, infertility support, transgender health benefits, and an Employee Assistance Program.
• Transit benefits and FSA and HSA options.
• Equity for all employees, including new-hire and refresher grants.
• Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in the sixth year.
• Company-paid professional coaching for all employees.
• Day-one 401(k) matching and matching on qualified student loan payments.