Cyber Security Engineer

Description

The company is hiring a cybersecurity analyst to lead incident response, forensics, threat hunting and proactive defense across its corporate, cloud and product environments.

The role sits on the Cyber Defense & Response team. You will detect, analyze and respond to advanced attacks against the company's corporate, cloud and product systems, run investigations, build automated responses and strengthen security across infrastructure and products.

You will work with security, data science and AI specialists on product security technology. The team wants a hands-on analyst who is creative and works well on their own.

Responsibilities

• Lead incident response for corporate, cloud and product environments, covering investigation, containment, eradication and recovery.
• Hunt for threats across endpoints, networks and cloud workloads to find indicators of compromise, new threats and control gaps before they cause damage.
• Investigate incidents in AWS, Azure, GCP and other clouds, including Kubernetes and containers, through log analysis, identity compromise work and workload forensics.
• Lead product security incident response with engineering teams, assessing how vulnerabilities, exploits and security flaws could affect company products.
• Carry out digital forensics and malware analysis to support investigations and root cause analysis.
• Write and improve security orchestration and automation playbooks with Security Engineering to speed up detection and response.
• Build and tune detections and defenses from threat models and attacker behavior across cloud, identity, endpoint and product telemetry, using MITRE ATT&CK to map adversary tactics and widen detection coverage.
• Advise engineering and business teams on secure design and incident handling, and help write security policies, standards and metrics.

Requirements

• A bachelor's degree in computer science or a related field, or equivalent experience.
• 8+ years of hands-on incident response and threat hunting work, including in cloud environments.
• Solid understanding of cloud security, identity and access management, and workload protection.
• Experience with product security investigations, vulnerability analysis and secure coding practices.
• Skill in forensic analysis, intrusion detection and threat intelligence.
• Advanced knowledge of network analysis, Windows, Linux and macOS internals, and web application security, including spotting abnormal behavior and assessing exploit paths.
• Able to work independently and collaborate well with teams across the world.
• Bonus: certifications such as GCIH, GCFA, AWS or Azure Security Specialty, or CISSP.
• Bonus: experience with cloud-native security tools such as AWS GuardDuty, Azure Sentinel or GCP Security Command Center.
• Bonus: Python, Go or similar development experience for security automation.
• Bonus: hands-on work with container security (Docker, Kubernetes), CI/CD pipelines and AI security.
• Bonus: advanced digital forensics and malware reverse engineering knowledge.

Conditions

Base salary is set by location, experience and the pay of people in similar roles, within a range of 168,000 USD to 270,250 USD.

Applications are accepted at least until October 31, 2026.

This posting is for an existing vacancy.

The company uses AI tools in its recruiting process.

The company is an equal opportunity employer and does not discriminate on protected characteristics.