What You'll Be Doing

Design, deploy and maintain high-quality detections on the SIEM platform with Git, peer review, and CI/CD
Build enterprise-scale SOAR workflows and integrations, utilizing AI to speed up triage and response
Tune alerts to reduce noise and measure accuracy of AI-assisted triage
Secure AI agents and integrations with least-privilege access, defending against prompt injection and data exposure
Serve on security firefighting rotation responding to urgent issues and inquiries
Lead and support security incidents and post mortems, coordinating cross-team responders and driving improvements
Proactively hunt for threats and maintain detection and response playbooks with new automations and insights

Requirements

5+ years of experience in cybersecurity including threat detection or incident response
Experience designing enterprise-scale SOAR workflows (e.g., Tines, n8n) and AI-driven security operations with scripting skills in Python or Go
Experience managing security data pipelines, including log collection, normalization, enrichment, and cost management
Hands-on Git and GitHub/GitLab skills managing detections and automation as code with peer review and CI/CD
Familiarity with cloud-based app threats, SaaS security, adversary TTPs (MITRE ATT&CK), and detection in logs
Confidence leading security incidents, coordinating responders across multiple teams, and presenting to executives
Excellent written and verbal communication skills in English for diverse audiences

Competitive reward package including salary, benefits, and pre-IPO equity reviewed annually
28 days of paid vacation, plus additional days after 2 and 4 years of service
One fully paid Impact Day each year to contribute to environmental or societal causes
Generous family leave, child support, mental health support with up to 24 sessions yearly, and sabbatical opportunities
Company meals, cultural initiatives, events like Summer Sessions and year-end celebrations, plus snacks, drinks, and weekly catered lunch