Security Software Engineer II, Detection and Response

Responsibilities

• Build alerts and automated workflows for security threat detection and response
• Manage logging pipelines and onboard new sources for enhanced detection coverage
• Develop and maintain tools for automated detection and response capabilities
• Respond to alerts and manage incidents in an on-call rotation
• Collaborate with cross-functional teams to improve security mechanisms
• Hunt for undetected threats within the infrastructure
• Leverage AI to optimize security engineering workflows and outputs

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent experience
• Strong focus on intrusion detection and incident response in a modern cloud-first environment
• Knowledge of attacker lifecycle and common attack detection techniques
• Hands-on experience with writing SIEM queries for various security operations
• Familiarity with telemetry sources such as EDR and firewall logs for threat investigation
• Understanding of networking technologies, including basic TCP/IP fundamentals
• Scripting experience (e.g., Python, Go, Ruby), especially for tool integration