Application Security Engineer
Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide. Living our values everyday results in our team-first culture and enables us to innovate, grow, and thrive while enjoying the journey together. We celebrate diversity and foster an inclusive environment, empowering our employees to be their authentic selves.
Our triage pipeline is heavily AI-enriched, so analysts spend little of their day working alerts directly. The role focuses on the work around triage: incident response, detection engineering, response automation, threat intelligence, and building the AI tooling the pipeline runs on. It is closer to a security engineering role than to a conventional SOC analyst role, and we expect you to write code. This position requires working Pacific Time hours (9:00 AM - 5:00 PM).
Responsibilities
- Incident response. Own incidents end to end: scoping, containment, forensics, write-up, and remediation follow-through.
- Detection engineering. Write, tune, test, and retire detections. Detection content is version controlled, reviewed, and measured on outcomes rather than alert volume.
- IR automation. Build playbooks, integrations, and workflows that remove repeated manual steps from the response process. This is a large part of the role.
- Threat intelligence. Track activity relevant to our environment and convert it into detections, hunts, and hardening work.
- Threat hunting. Be a contributor to our hypothesis-led threat hunting initiatives.
- AI-assisted development. Build and improve the agents, prompts, and enrichment logic behind the triage pipeline.
- Alert triage. A limited amount: escalations the pipeline surfaces, plus the feedback that improves it.
Requirements
- Hands-on security operations experience, including incidents you can walk through in detail.
- Proficiency in at least one scripting language (Python or equivalent) and a preference for solving recurring problems with code.
- Working knowledge of detection logic, log pipelines, and modern telemetry sources: EDR, identity, cloud, network, and SaaS.
- Ability to take an ambiguous problem, define what done looks like, and build it.
- Clear written communication: incident timelines, design notes, and postmortems.
Preferred Qualifications
- GCP and/or AWS experience, including cloud logging, IAM, and cloud-specific failure modes.
- Low-code automation platforms such as Tines or n8n, and judgment about when a workflow should become production code.
- Agent programming and prompt engineering, specifically LLM tooling reliable enough for operational use.
- Experience with AI-enriched detection or triage pipelines.
How The Team Works
You will be given problems rather than tickets, and you are responsible for the solution and the reasoning behind it. There is no micromanagement and minimal handholding. This suits people who self-direct and are candid when something is not working. It does not suit people who need an assigned queue.
Work Location
This role is fully remote for candidates who reside outside the 30-mile radius of one of our offices. For candidates within a 30-mile radius, this role is hybrid and requires 3 days a week (Tuesday, Wednesday, Thursday) in the office.
Pay
The US base salary range for this role is $66,300—$174,700 USD. Actual compensation packages are based on several factors unique to each candidate, including skill set, depth of experience, certifications, and specific work location. Additionally, the total compensation package may include an annual performance bonus, stock, and/or other applicable incentive compensation plans.
Benefits
- Health, dental, and vision coverage beginning on the first day of employment. Five9 covers 100% of the employee portion and shares a high portion of the dependent cost.
- Short & Long-Term Disability and Basic Life Insurance.
- 401k savings plan with employer matching.
- Access to an innovative mental health support platform offering personalized care and resources, including therapy, coaching, and self-guided mindfulness exercises for all covered employees and dependents.
- Generous employee stock purchase plan.
- Paid Time Off, company-paid holidays, paid volunteer hours, and 12 weeks of paid parental leave.