Drimva

Betterment

Security Engineer, Detect & Respond

$145K–$180K

Betterment HQ - New York City +1 · Full-time · Posted Sep 23, 2026

Location
Betterment HQ - New York City
61 West 23rd Street, Fifth Floor, New York, New York
Experience
3+ years in security operations or security engineering.

About the job

Build and operate security detection and response capabilities, support incident response, and improve monitoring and on-call operations, including coverage for AI-related risks.

What you'll do

  • Develop and improve detections, SIEM integrations, automations, and on-call processes.
  • Participate in security on-call and support incident triage, investigation, containment, and playbook updates.
  • Build visibility and detection coverage for AI tools and activity, partnering with engineering and governance teams.

What they ask for

  • 3+ years of experience in security operations or security engineering.
  • Experience with SIEM and SOAR platforms, including writing searches and building alerts.
  • Exposure to incident response, such as alert triage, investigation, or containment.
  • Programming or scripting background; comfortable reading and writing code.

Nice to have

  • Familiarity with AWS and SaaS security tools such as CrowdStrike or Okta.
  • Familiarity with MITRE ATT&CK and common attacker tactics and techniques.

Pay

$145,000 - $180,000 USD base salary

Tools

SIEM, SOAR, MITRE ATT&CK, AWS, CrowdStrike, Okta

AI focus

Use AI tooling in detection development and triage; build detection coverage and visibility for AI tools, including agent and connector activity, prompt injection, misuse, permissions, and data movement.

Model-written summary · the original posting is authoritative

First seen Oct 27, 2026 · Last verified Nov 5, 2026 (UTC)