Senior Security Engineer, Detection & Response

• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows
• Design and implement detection strategies for suspicious activity and data exfiltration patterns
• Extend audit and attribution coverage across Kubernetes, databases, SSO, and access-path telemetry
• Investigate and respond to security incidents across cloud infrastructure and applications
• Perform root cause analysis and drive long-term fixes
• Run proactive threat hunts across cloud and identity planes
• Build repeatable agentic hunting workflows
• Operate vulnerability management across infrastructure, platforms, and applications
• Triage and validate external security findings and bug bounty reports
• Contribute to threat modeling and security design reviews
• Apply AWS and Kubernetes expertise to secure systems and advise engineering teams
• Support security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop automation, including AI, for security operations, detection, and response
• Participate in the on-call rotation for detection and response and owned services
• Report to the Director of Information Security and collaborate with security platform, network, and zero-trust engineers

• 6+ years of experience in security, software, or infrastructure engineering
• Hands-on experience securing cloud-based production systems
• Experience with SIEM platforms such as Wazuh, Splunk, or ELK
• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Strong hands-on vulnerability-management experience, including scanning, triage, validation, remediation coordination, and verification
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure, security architecture, and operational best practices
• Ability to investigate issues using logs, cloud tooling, and system-level data
• Experience assessing detection and logging implications of new systems in design reviews
• Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS
• Working knowledge of PCI DSS and SOC 2 compliance frameworks
• Demonstrated AI-forward engineering experience using tools such as Claude Code, Codex, Cursor, or custom LLM integrations
• Preferred: experience building AI-assisted workflows, internal penetration testing, cloud-native security controls, container and dependency security tools, regulatory compliance alignment, or fintech/payments environments

• Gross monthly compensation of $5,000–$9,500 USD, based on experience
• AI-assisted engineering workflows
• Participation in on-call rotation
• Open-source-focused engineering environment
• Diverse employee community with interests including music, yoga, cycling, cooking, golf, dogs, and rock climbing