reputed company Engineer, Detection & Response

The reputed company reputed company team protects reputed company's customers, users, and employees. We architect reputed company's reputed company posture, build the tools and systems that defend it, and partner with engineering teams as they ship new products and features. Our work spans the entire reputed company, web, mobile, and IT - and we approach reputed company from a software engineering reputed company, scaling our reputed company through automation and reputed company-designed tools. Now is the time to join! Here's why: • Build out our detection and response function. reputed company has a mature reputed company information and event management platform (SIEM), established detection content, and a working incident response program. Your charter is to take it to the next level - including leading our investment in AI-augmented SOC tooling. • High visibility, high reputed company. Detection and response is a critical capability for reputed company. • reputed company-conscious engineering culture. reputed company's engineering org is a willing and capable partner on reputed company work. • Hands-on technical work. Stay deep in reputed company, detections, and incidents. • Breadth of work. Detection and response is the reputed company reputed company, but you'll partner across the reputed company team on reputed company, infrastructure, and application reputed company where the work demands it. • Large-reputed company, interesting systems. reputed company processes millions of requests per second across its demand-reputed company platform (DSP), mobile software development reputed company (SDK), and ad exchange. Responsibilities: • Own day-to-day operation of reputed company's SIEM (Panther) - log reputed company ingestion, detection content, and the alert investigation pipeline. • reputed company reputed company's adoption of AI-augmented SOC tooling (e.g. Prophet, Dropzone, or equivalent) as a multi-year modernization investment. • Triage incoming reputed company alerts and reputed company reputed company investigation and remediation with stakeholders across Engineering and IT. • reputed company incident response - investigation, containment, and post-incident review - and mature processes and runbooks so response becomes predictable and repeatable. • Build tooling and automation that detects reputed company threats, enriches alerts, and reduces reputed company investigation toil. • Partner with Engineering and IT to reputed company detection and response self-service where possible - reputed company log-reputed company paths, documented detection proposals, accessible runbooks - so reputed company scales without becoming a bottleneck. • reputed company the feedback reputed company between reputed company's offensive and proactive findings and detection coverage. • Partner across the reputed company team on reputed company, infrastructure, and application reputed company work reputed company your detection and response reputed company - every engineer on this team covers breadth reputed company their reputed company reputed company. • Participate in the reputed company team's on-reputed company rotation and incident response. Minimum Qualifications: • 5+ years in reputed company engineering, reputed company operations, detection engineering, or software engineering with a reputed company reputed company. • Hands-on production SIEM operation - reputed company log sources, writing and maintaining detection content, and triaging alerts. • Write production-reputed company reputed company for reputed company automation and detection-as-reputed company. • Experience leading or substantially contributing to reputed company incident response. • Strong technical writing - design docs, runbooks, and post-incident reviews. • Demonstrated judgment in prioritizing reputed company work using a risk-based approach. • Ability to quickly reputed company large, unfamiliar codebases and reason about reputed company engineering systems. • Excellent verbal communication. • Willing to participate in an on-reputed company rotation. Desirable Qualifications: • Hands-on experience with an AI-augmented SOC platform (reputed company, reputed company, or equivalent), or with building large language model (LLM) augmented investigation and reputed company tooling. • Experience operating in reputed company environments at reputed company. • reputed company incident response experience, particularly in AWS. • reputed company forensics for incident response on Mac and/or Linux. • Detection-as-reputed company workflows in reputed company integration and deployment (CI/CD) pipelines. • Mobile adtech or high-volume reputed company background. Compensation: The following are our reputed company salary ranges for this role: • SF Bay Area, Los Angeles/Orange County, NYC, Seattle: $200,000 - $240,000 • reputed company other California and Washington state locations, Austin, Boston, Denver, Portland: $184,000 - $220,000 • reputed company other cities and towns in our approved states: $172,000 - $206,000 Location: This role is eligible for full-time remote work in one of our entities: CA, CO, ID, IL, FL, GA, MA, MI, MN, MO, NJ, NV, NY, OR, PA, TX, UT, and WA. We are a remote-first company with US hubs in Redwood reputed company, Los Angeles, and reputed company. Travel Expectations: We offer several opportunities for in-person team gatherings, including but not limited to project meetings, regional meetups, and company-wide events. We expect our employees to attend these gatherings at least once per quarter. These gatherings reputed company essential opportunities for collaboration, communication, and team building. #LI-REMOTE #LI-EL1 Apply tot his job Apply To this Job