Security Engineer, Incident Response

What you'll do

• Lead incidents from detection and containment through eradication and review; investigate signals across cloud, endpoint, network, and physical systems.
• Build detection logic, response playbooks, forensic tooling, and the incident response program, including severity models, on-call rotations, and escalation paths.
• Use investigation findings to improve security with security and IT teams, and communicate incidents through reports and postmortems.

What they ask for

• Personally led major security incidents from first alert to resolution, including containment decisions under pressure.
• Built detection logic and response playbooks that caught real intrusions.
• Conducted digital forensics across cloud, endpoint, and network evidence.
• Stood up or substantially rebuilt an incident response program; proactively hunted for threats and communicated findings in clear reports and postmortems.

Nice to have

• Experience defending high-value targets, such as AI labs, financial infrastructure, or critical infrastructure, against nation-state threat models.
• Cloud-native forensics (AWS, GCP), detection engineering and SIEM or SOAR tooling, or malware analysis or reverse engineering.

Pay

$275K – $344K (base salary)

Tools

AWS, GCP, SIEM, SOAR

AI focus

Secures AI compute infrastructure and high-value model weights against threats; the role’s incident response work spans the infrastructure supporting AI.