2 months ago
Remote, United StatesSenior
Base Salary
$172k - $240k/yr
Responsibilities
- Own day-to-day operation of the Panther SIEM, including log-source ingestion, detection content, and alert investigation pipelines.
- Lead adoption of AI-augmented SOC tooling such as Prophet Security, Dropzone AI, or an equivalent platform.
- Triage security alerts and drive investigation and remediation with Engineering and IT stakeholders.
- Lead incident response activities including investigation, containment, and post-incident review.
- Build security automation and detection tooling to identify threats, enrich alerts, and reduce manual investigation work.
- Develop self-service log onboarding, detection proposals, runbooks, and repeatable response processes.
- Improve detection coverage using findings from offensive and proactive security work.
- Partner on cloud, infrastructure, and application security initiatives.
- Participate in the Security team’s on-call rotation and incident response.
Requirements
- At least 5 years of experience in security engineering, security operations, detection engineering, or security-focused software engineering.
- Hands-on production SIEM experience, including log-source onboarding, detection-content development and maintenance, and alert triage.
- Ability to write production-quality code for security automation and detection-as-code.
- Experience leading or substantially contributing to security incident response.
- Strong technical writing skills for design documents, runbooks, and post-incident reviews.
- Risk-based judgment for prioritizing security work, ability to navigate large codebases, and ability to reason about complex engineering systems.
- Excellent verbal communication and willingness to participate in an on-call rotation.
- Preferred: experience with Prophet Security, Dropzone AI, or equivalent AI-augmented SOC platforms, or with LLM-augmented investigation and runbook tooling.
- Preferred: experience operating cloud environments at scale, especially AWS cloud incident response.
- Preferred: endpoint forensics on Mac or Linux, detection-as-code workflows in CI/CD pipelines, and mobile adtech or high-volume SaaS experience.
Benefits
- Full-time remote work is available in approved U.S. states, with a remote-first company and hubs in Redwood City, Los Angeles, and New York City.
- Employees are expected to attend in-person project meetings, regional meetups, or company-wide gatherings at least once per quarter.
- Benefits may include medical coverage, wellness stipends, equity, and additional perks based on country of residence.
About Liftoff
Liftoff builds an AI-driven performance marketing and monetization platform for mobile apps, used by both marketers and publishers. Its products—including Accelerate, Direct, Monetize, Intelligence, and Vungle Exchange—support user acquisition, retargeting, and programmatic demand. Founded in 2012 and headquartered in Redwood City, CA, Liftoff is owned by Blackstone and reports serving over 6,600 mobile businesses across 74 countries.