12 hours ago
London, United KingdomSenior
Responsibilities
- Develop, test, and deploy high-fidelity rule-based and anomaly-based detections-as-code.
- Triage alerts and respond to cyber threats through end-to-end incident response investigations.
- Conduct digital forensic investigations, including evidence collection and analysis.
- Automate and codify detection and response workflows and build security tooling.
- Improve and maintain detection and response pipelines and underlying systems.
- Collaborate with Threat Intelligence to identify and respond to sophisticated threats.
- Develop AI-first security systems to automate detection and response operations.
- Conduct threat hunts across corporate, cloud, and product environments.
- Support data engineering workflows for security data lake and SIEM platforms.
- Participate in detection and response on-call rotations.
- Coach and mentor security engineers on the detection and response team.
Requirements
- At least 5 years of hands-on security experience in modern cloud environments.
- Experience triaging and responding to cyber threats.
- Experience with large-scale log analysis, incident response, and/or digital forensics.
- Experience with centralized security data lakes and SIEM solutions.
- Hands-on experience writing detections-as-code.
- Strong data-querying skills, such as SQL and Splunk.
- Familiarity with large-scale data pipelines and data engineering techniques.
- Proficiency in programming languages such as Python or Go for automation and tool building.
- Proven experience with Git, GitHub, and CI/CD automations.
- Familiarity with threat-actor tactics, techniques, and procedures.
- Experience participating in detection and response or incident response on-call rotations.
- An engineering-first and AI-first approach, strong communication skills, continuous-learning mindset, and self-managing team-oriented work ethic.
Benefits
- Comprehensive health, welfare, and wellbeing benefits based on eligibility.
- Potential participation in an annual cash bonus plan, equity, and sign-on payments.
- The role may require up to 10% travel, coordinated in advance, for onboarding, team meetings, industry events, or applicable client or partner work.
About Klaviyo
Klaviyo builds a subscription SaaS platform that lets e-commerce and consumer brands use first-party data to run targeted email, SMS, and push campaigns, with built-in automation and analytics. The product also includes B2C CRM features for segmentation, A/B testing, and customer lifecycle workflows. Founded in 2012 and headquartered in Boston, it is a public company (NYSE: KVYO) used by brands such as Mattel and Glossier.