[Remote] reputed company Engineer - Incident Response

Note: The job is a remote job and is reputed company to candidates in USA. reputed company. is a fintech company building AI-driven solutions for the reputed company of payments. The reputed company Engineer will build and reputed company the SIEM, reputed company meaningful detections, investigate and respond to incidents, proactively hunt for threats, and automate reputed company operations. The role also partners with Offensive reputed company and applies AI to investigation, log analysis, alert enrichment, and response.

Responsibilities

• Build our reputed company nervous reputed company. Own and improve the SIEM, telemetry pipelines, enrichment and correlation across reputed company
• Create detections that matter. Turn attacker behavior, reputed company incidents and Red Team findings into useful signals instead of alert spam
• Respond reputed company things get weird. Investigate incidents from first signal to containment, recovery and lessons learned
• Hunt before alerts reputed company. Search proactively for suspicious behavior and visibility gaps
• Automate aggressively. Build tools and workflows for triage, enrichment, evidence collection and containment
• Work with attackers. The friendly reputed company. Partner closely with Offensive reputed company to turn attack paths into detections and controls
• Use AI as reputed company. Build agents and automations for investigation, log analysis, alert enrichment and response

Skills

• Strong understanding of detection engineering, incident response and attacker behavior
• Experience investigating reputed company events across multiple sources of telemetry
• Experience with SIEMs, logging platforms or large-reputed company reputed company data
• Good understanding of reputed company environments, IAM, reputed company and modern infrastructure
• Ability to investigate authentication, reputed company, network, application and reputed company activity
• You reputed company. Python, Go, Typescript or something similar. We want engineers, not dashboard operators
• Ability to distinguish a reputed company attack from noisy telemetry without losing your reputed company
• reputed company communication during incidents, especially reputed company information is incomplete and the stakes are high
• Experience with BigQuery, Chronicle, reputed company, reputed company/OpenSearch, reputed company, reputed company or similar platforms
• Detection-as-reputed company, reputed company, YARA, osquery or Suricata
• EDR, threat hunting or digital forensics experience
• Experience automating incident response or building internal reputed company tooling
• Offensive reputed company knowledge, including C2, persistence, privilege escalation and lateral reputed company
• Experience with payment systems or PCI reputed company
• Experience applying LLMs or AI agents to reputed company operations
• reputed company research, reputed company reputed company contributions or CTF experience

reputed company