5 hours ago
Base Salary
$160k - $180k/yr
Responsibilities
- Triage alerts, hunt for suspicious activity, and investigate threats across cloud, corporate, identity, endpoint, and production environments.
- Build and tune detections, onboard telemetry, maintain log pipelines, and test detection rules against attacks and benign activity.
- Participate in security on-call and incident response, including scoping, containment, recovery, evidence preservation, and post-incident improvements.
- Automate evidence collection, alert enrichment, investigation timelines, and response preparation using AI-assisted workflows.
- Evaluate AI-assisted workflows for false positives, missed threats, adversarial inputs, failure modes, and traceable evidence.
- Partner with Infrastructure and IT on vulnerability remediation, cloud and host hardening, identity controls, and attack-surface monitoring.
- Help secure AI-agent operations through controls for identities, credentials, tool access, audit logging, and suspicious-agent behavior detection.
- Share reusable code, runbooks, investigation skills, documentation, and evaluation cases while pairing with and mentoring teammates.
- Track detection coverage, alert quality, investigation effort, response time, and remediation progress to improve defensive outcomes.
Requirements
- Hands-on experience spanning security operations, detection engineering, threat hunting, and incident response.
- Strong scripting and software-building ability, especially in Python, with experience using APIs, version control, tests, and production automation.
- Experience with a SIEM such as Panther, Splunk, or an equivalent platform, including detection logic and log analysis.
- Working knowledge of cloud security, identity, endpoint telemetry, networking, and Linux systems.
- Experience building and using AI-assisted tools in security or adjacent engineering work, including validating outputs, handling failures, and protecting sensitive information.
- Sound incident judgment, including separating hypotheses from findings, preserving evidence, and deciding when to escalate or contain.
- Evidence of improving teammates’ effectiveness through tools, mentoring, code review, or documentation without management authority.
- Clear written communication and willingness to own urgent investigations and follow-through.
- Helpful experience with AWS, Kubernetes, bare-metal infrastructure, detection-as-code, SOAR workflows, digital forensics, threat intelligence, attack simulation, AI-agent security, blockchain infrastructure, or sensitive-key environments.
Benefits
- Private health insurance.
- Gym reimbursement.
- Commuter benefits.
- Flexible time off.
- In-office group meals.
- Learning and development stipend.
- Company-sponsored conferences and events.
- Books and audiobook subscription with Bookster.
Tech Stack
Categories
