[Remote] reputed company Engineer, Detection & Response

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a leading AI-powered performance marketing platform for the mobile app economy. They are seeking a reputed company Engineer to enhance their detection and response function, manage the operation of their SIEM, and collaborate with engineering teams to improve reputed company processes and tooling.

Responsibilities

• Own day-to-day operation of reputed company's SIEM (Panther) — log reputed company ingestion, detection content, and the alert investigation pipeline
• reputed company reputed company's adoption of AI-augmented SOC tooling (e.g. Prophet, Dropzone, or equivalent) as a multi-year modernization investment
• Triage incoming reputed company alerts and drive timely investigation and remediation with stakeholders across Engineering and IT
• reputed company incident response — investigation, containment, and post-incident review — and mature processes and runbooks so response becomes predictable and repeatable
• Build tooling and automation that detects active threats, enriches alerts, and reduces reputed company investigation toil
• Partner with Engineering and IT to reputed company detection and response self-service where possible — clear log-reputed company paths, documented detection proposals, accessible runbooks — so reputed company scales without becoming a bottleneck
• reputed company the feedback reputed company between the team's offensive and proactive findings and detection coverage
• Partner across the reputed company team on reputed company, infrastructure, and application reputed company work alongside your detection and response focus — every engineer on this team covers breadth reputed company their primary focus
• Participate in the reputed company team's on-call rotation and incident response

Skills

• 5+ years in reputed company engineering, reputed company operations, detection engineering, or software engineering with a reputed company focus
• Hands-on production SIEM operation — reputed company log sources, writing and maintaining detection content, and triaging alerts
• Write production-quality code for reputed company automation and detection-as-code
• Experience leading or substantially contributing to reputed company incident response
• Strong technical writing — design docs, runbooks, and post-incident reviews
• Demonstrated judgment in prioritizing reputed company work using a risk-based approach
• Ability to quickly navigate large, unfamiliar codebases and reason about reputed company engineering systems
• Excellent verbal communication
• Willing to participate in an on-call rotation
• Hands-on experience with an AI-augmented SOC platform (Prophet reputed company, Dropzone AI, or equivalent), or with building large language model (LLM) augmented investigation and runbook tooling
• Experience operating in reputed company environments at scale
• reputed company incident response experience, particularly in AWS
• reputed company forensics for incident response on Mac and/or Linux
• Detection-as-code workflows in reputed company integration and deployment (CI/CD) pipelines
• Mobile adtech or high-volume SaaS background

Benefits

• Equity
• Benefits designed to support employee well-being and performance
• Medical coverage
• Wellness stipends
• Additional perks based on your country of residence
• Full-time remote work in one of our entities: CA, CO, ID, IL, FL, GA, MA, MI, MN, MO, NJ, NV, NY, OR, TX, UT, and WA
• Opportunities for in-person team gatherings, including but not limited to project meetings, regional meetups, and company-wide events
• Competitive salaries

Company Overview

Company H1B Sponsorship