Security Engineer

Job Overview

We're seeking a Security Engineer to join our Information Security & Risk Management (ISRM) team. As a Security Engineer, you will be responsible for the day-to-day work of our security operations, including vulnerability management, detection and monitoring, and incident response.

Responsibilities

• Manage vulnerabilities by triaging findings from various sources, validating exploitability and impact, and assigning severity levels.
• Collaborate with engineering teams to agree on fixes and timelines, track vulnerabilities through to closure, and escalate items at risk of missing deadlines.
• Build, tune, and maintain detections in our SIEM system across cloud, identity, endpoint, and application logs.
• Utilize AI tools to speed up alert triage, enrich investigations, write and test detection logic, and automate repetitive security operations tasks.
• Investigate and respond to security incidents from initial alert through containment, eradication, and recovery.
• Identify gaps in log sources and detection coverage, onboard new sources, and maintain up-to-date runbooks.
• Participate in the security on-call rotation.

Requirements

• 3-5 years of experience in security engineering, security operations, or a related role.
• Hands-on experience with vulnerability management, including triaging and validating scanner and pentest findings.
• Experience working with SIEM systems, such as Splunk or Google SecOps.
• Experience investigating and responding to security incidents.
• Understanding of common attack techniques and how to detect them.
• Working knowledge of cloud security in GCP or AWS.
• Scripting skills in Python, Go, or a similar language.
• Experience using AI tools to automate security workflows.

Nice to Have

• Experience with detection-as-code tools like Sigma rules.
• Experience with EDR tools like CrowdStrike or SentinelOne.
• Experience with SOAR or workflow automation platforms.
• Experience with Kubernetes and container security.
• Experience running or supporting a bug bounty program.

What Success Looks Like

• Within the first 3 months, you will understand our environment, log sources, and vulnerability pipeline, and be able to triage incoming findings and alerts independently.
• By 6 months, you will own the vulnerability triage queue end-to-end, have tuned our noisiest detections to reduce false positives, and have led the response to incidents.
• By 12 months, you will have shipped at least one AI-assisted workflow that measurably reduces triage or investigation time.

Growth Path

This role is part of a defined security engineering career path, with opportunities to grow into a Senior Security Engineer role.

Compensation

The total target cash compensation (TTCC) for this role ranges from $160,000 to $210,000 USD, including base compensation and variable compensation in the form of either a company bonus or commissions.

Benefits and Perks

• Comprehensive Medical, Vision, and Dental Care
• Mental Wellness Benefit
• Generous Vacation Policy & Additional Company Holidays
• Enhanced Parental Leave
• Volunteer Time Off
• Additional US Benefits: Pre-Tax Benefits including 401(K), Wellness Benefit, Holiday Break