Whatnot
Threat Detection and Response Engineer
$165K–$260K
San Francisco, CA +3 · Remote · Full-time · Posted Aug 18, 2026
- Location
- San Francisco, CA
New York, NY
Los Angeles, CA
Seattle, WA - Experience
- Minimum 5+ years of relevant security experience; 5+ years in cyber incident response or a similar cyber field.
- Education
- Bachelor’s degree in Computer Science, Information Security, a related field, or equivalent work experience.
About the job
Leads cyber incident response and forensic investigations, develops threat detections and playbooks, and reports SOC health and security findings.
What you'll do
- Escalate and drive cyber incidents, including triage, containment, eradication, and forensic investigations across endpoints and cloud environments.
- Identify detection opportunities, analyze threat intelligence, and create and improve incident response playbooks and procedures.
- Document and present incident findings, and report SOC health through metrics, OKRs, and risk indicators.
What they ask for
- 5+ years’ experience in cyber incident response or a similar cyber field, including security principles and defense-in-depth techniques.
- Experience with SOAR (Tines), EDR, NDR, and SIEM (Chronicle) technologies.
- Experience with multiple Cloud Service Providers (AWS, GCP).
- Excellent written communication skills for documenting and reporting security incidents and communicating with product and business leaders; expected to perform on-call duties.
Nice to have
- Experience in a large enterprise environment.
Pay
$165K - $260K (base salary)
Tools
Tines, Chronicle, AWS, GCP, SOAR, EDR, NDR, SIEM
Model-written summary · the original posting is authoritative