Security Software Engineer II

Responsibilities

• Build alerts and automation workflows for detecting and responding to internal and external security threats.
• Manage logging pipelines and infrastructure and onboard new logging sources.
• Develop and maintain internal detection and response tooling.
• Respond to alerts and run security incidents as part of an on-call rotation.
• Collaborate with cross-functional partners and hunt for previously undetected threats.
• Use AI to improve the efficiency, accuracy, and coverage of security engineering work.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
• Strong knowledge of intrusion detection and incident response in a modern cloud-first environment.
• Knowledge of attacker lifecycles and common attack and detection techniques.
• Hands-on experience writing SIEM queries for alerting, response, and threat hunting.
• Experience using threat intelligence to improve detection capabilities.
• Familiarity with telemetry sources such as EDR, Osquery, and firewall logs.
• Understanding of networking technologies, network security, and basic TCP/IP fundamentals.
• Depth in macOS internals, or alternatively Linux/UNIX or Windows internals, including persistence and privilege escalation techniques.
• Scripting or automation experience with Python, Go, or Ruby.
• Ability to use AI effectively, critically evaluate AI-assisted work, and remain accountable for final decisions and deliverables.

Benefits

• Eligible for equity in addition to the stated base salary.
• Remote arrangement within the country; in-office collaboration is required 1–2 times every six months.
• Not eligible for relocation assistance.