Security Engineer - Incident Response

Highlights

• Lead security incidents end-to-end as commander from first signal to recovery.
• Defend a fast-moving cloud-native AI vibe-coding platform used by millions.
• Turn incident lessons into stronger detections, playbooks, and hardening.

What they offer

• Competitive salary and equity
• 401(k) with 4% match (US only)
• Health, dental, vision and life insurance
• Short-term and long-term disability
• Paid parental, medical, and caregiver leave
• Flexible time off plus holidays
• Monthly wellness stipend
• Quarterly team gatherings
• Autonomous work environment

Ideal candidate

Incident-driven security engineer who stays calm under pressure and owns investigations end-to-end. Curious, collaborative, and motivated to automate response and harden platforms so the next incident is faster.

Requirements

• Lead security incidents as commander or technical lead in cloud or SaaS environments
• Hands-on investigation with SIEM, cloud audit logs, and large datasets under pressure
• Write production-quality Python, Go, or Bash scripts for investigation and automation
• Strong cloud security knowledge, especially GCP IAM, audit logging, GKE, and networking
• Investigate and contain compromised Kubernetes and container workloads
• Understand identity systems, SaaS architectures, and cloud attack paths
• Familiar with engineering fundamentals, CI/CD, and package ecosystems
• Know IR lifecycle such as NIST 800-61, vulnerability lifecycle, and exploitability analysis