Remote job
Staff Security Engineer, Incident Response
Job details
About this role
Role overview
A large data and AI platform company is hiring a Staff Security Engineer to join its Incident Response team as an individual contributor reporting to a regional IR manager. The role focuses on responding to security threats and incidents, conducting forensics, and building automations and agentic capabilities that scale response across a distributed 24x7 operation.
Responsibilities
- Respond to incidents as part of a distributed 24x7 operations and on-call schedule. - Triage and respond to high-priority security events and alerts, ensuring quick and effective containment. - Conduct analysis and forensics across a range of data sources to determine the timeline and impact of security events. - Provide technical leadership, influence team direction, and mentor junior responders through design reviews, code reviews, and security guidance. - Build solutions that leverage AI and agentic platforms to deliver autonomous response capabilities and expand the team's impact. - Communicate technical decisions through design documents and tech talks across the broader security organization.
Requirements
- Bachelor's degree and 7+ years of incident response experience, or Master's degree and 5+ years. - Cloud security expertise in at least one of AWS, GCP, or Azure, with proficiency in the others. - Hands-on proficiency with AI, LLM, and agentic capabilities, preferably including building and operating agentic systems in a security setting. - Broad security subject matter expertise and depth in several core IR skills such as DFIR, reverse engineering, traditional network security, storage and access security, sandboxing, or compute security. - Experience with enterprise security and SaaS applications, plus working knowledge of a SIEM and SOAR. - Experience building incident response tooling, scripting skills, and familiarity with AI coding tools.
Benefits and work setup
- Region-specific benefits and perks are provided; details vary by location. - Commitment to a diverse and inclusive hiring process with equal employment opportunity standards. - Some positions may require access to export-controlled technology or source code, in which case the employer may need to pursue a U.S. government license or decline to proceed on that basis.