Security Software Engineer II

Responsibilities

Build alerts and automation workflows for detecting and responding to internal and external security threats. Manage logging pipelines and infrastructure and onboard new logging sources. Develop and maintain internal detection and response tooling. Respond to alerts and run security incidents as part of an on-call rotation. Collaborate with cross-functional partners and hunt for previously undetected threats. Use AI to improve the efficiency, accuracy, and coverage of security engineering work.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience. Strong knowledge of intrusion detection and incident response in a modern cloud-first environment. Knowledge of attacker lifecycles and common attack and detection techniques. Hands-on experience writing SIEM queries for alerting, response, and threat hunting. Experience using threat intelligence to improve detection capabilities. Familiarity with telemetry sources such as EDR, Osquery, and firewall logs. Understanding of networking technologies, network security, and basic TCP/IP fundamentals. Depth in macOS internals, or alternatively Linux/UNIX or Windows internals, including persistence and privilege escalation techniques. Scripting or automation experience with Python, Go, or Ruby. Ability to use AI effectively, critically evaluate AI-assisted work, and remain accountable for final decisions and deliverables.

Benefits

Eligible for equity in addition to the stated base salary. Remote arrangement within the country; in-office collaboration is required 1–2 times every six months. Not eligible for relocation assistance.