Security Incident Response, Senior Analyst

digital Marketing And Graphic Design; Apurímac; Híbrido; PEN 412 000 - 618 000; Tempo integral

Resumo da oferta

Shopify is seeking a Security Incident Response Senior Analyst to analyze security alerts, act as incident commander, and partner with Legal on investigations. The role emphasizes workforce security, data-driven decision making, and comprehensive incident remediation.

The ideal candidate will drive detection improvements, work with cross-functional teams, and translate complex security data into actionable insights for merchants and stakeholders.

Qualificações

• Understanding of information security fundamentals, including threat models and detection techniques.
• Knowledge of security issues affecting web applications, infrastructure, and internal systems.
• Comfort with running and debugging scripts (e.g., Python, Ruby, bash) to automate work.
• Experience with logging and data analysis tools (e.g., SIEM, SOAR, SQL, Splunk, KQL).
• Familiarity with UEBA tools and IAM systems (e.g., Okta, Microsoft Entra).
• Knowledge of cloud environments and security logs (e.g., GCP, AWS, Azure).
• Excellent communication skills for distilling technical data into actionable intelligence.
• Experience in troubleshooting complex problems with minimal information.
• Proficiency in researching and using data analysis to identify security threats.

Responsabilidades

• Analyze and respond to security alerts, focusing on workforce security to reduce risks.
• Serve as an Incident Commander, leading response efforts and collaborating across Shopify.
• Partner daily with Legal on sensitive investigations, evidence gathering, and mitigation strategies.
• Implement new alerts to enhance detection capabilities.
• Collaborate with security, engineering, HR, and Legal teams to remediate findings and address risks.
• Lead root cause analysis sessions to prevent recurrence of incidents.
• Participate in defining security table‑top exercises focused on workforce security.
• Refine and build knowledge base documentation for clarity among technical and legal stakeholders.
• Identify trends in the security landscape and recommend improvements.

Conhecimentos

Threat models

Web application security

Scripting

SIEM / SOAR / SQL / Splunk / KQL

UEBA tools

IAM systems

Cloud security

Communication

Investigation

Ferramentas

Splunk

KQL

SQL

Okta

GCP

AWS

Azure

Descrição da oferta de emprego

Back

Security Incident Response, Senior Analyst

• Remote - Americas
• Support

About The Role

We’re looking for a curious and detail-oriented Incident Response, Senior Analyst to harness your expertise in data analytics, infrastructure, application security, and identity management. You’ll analyze security alerts and respond to a wide range of incidents, including workforce security, where your efforts will be crucial in preserving the trust our merchants place in Shopify. As the incident commander, you’ll own issues from start to finish, persistently bringing all the pieces together and leaving no stone unturned. This role has a significant investigative component, offering daily opportunities to apply your analytical skills and experience navigating vast amounts of data to find that needle in the haystack that will be the key to resolving the security issue, working in close partnership with our Legal team.

Key Responsibilities

• Analyze and respond to security alerts, focusing on workforce security to reduce risks.
• Serve as an Incident Commander, leading response efforts and collaborating across Shopify.
• Partner daily with Legal on sensitive investigations, evidence gathering, and mitigation strategies.
• Implement new alerts to enhance detection capabilities.
• Collaborate with security, engineering, HR, and Legal teams to remediate findings and address risks.
• Lead root cause analysis sessions to prevent recurrence of incidents.
• Participate in defining security table‑top exercises focused on workforce security.
• Refine and build knowledge base documentation for clarity among technical and legal stakeholders.
• Identify trends in the security landscape and recommend improvements.

Qualifications

• Understanding of information security fundamentals, including threat models and detection techniques.
• Knowledge of security issues affecting web applications, infrastructure, and internal systems.
• Comfort with running and debugging scripts (e.g., Python, Ruby, bash) to automate work.
• Experience with logging and data analysis tools (e.g., SIEM, SOAR, SQL, Splunk, KQL).
• Familiarity with UEBA tools and IAM systems (e.g., Okta, Microsoft Entra).
• Knowledge of cloud environments and security logs (e.g., GCP, AWS, Azure).
• Excellent communication skills for distilling technical data into actionable intelligence.
• Experience in troubleshooting complex problems with minimal information.
• Proficiency in researching and using data analysis to identify security threats.

Nice to Have

• Experience in digital forensics or workforce security investigations is a strong asset.
• Proficiency in generating code/scripts for automation
• Experience handling sensitive investigations such as employment or legal matters
• Eastern timezone preferred
• Comfort using AI/LLM tools for efficient task completion.
• Awareness of GitHub and continuous integration practices.

About Shopify

Opportunity is not evenly distributed. Shopify puts independence within reach for anyone with a dream to start a business. We propel entrepreneurs and enterprises to scale the heights of their potential. Since 2006, we’ve grown to over 8,300 employees and generated over $1 trillion in sales for millions of merchants in 175 countries.

This is life‑defining work that directly impacts people’s lives as much as it transforms your own. This is putting the power of the few in the hands of the many, is a future with more voices rather than fewer, and is creating more choices instead of an elite option.

About You

Moving at our pace brings a lot of change, complexity, and ambiguity—and a little bit of chaos. Shopifolk thrive on that and are comfortable being uncomfortable. That means Shopify is not the right place for everyone.

Before You Apply, Consider If You Can

• Care deeply about what you do and about making commerce better for everyone
• Excel by seeking professional and personal hypergrowth
• Keep up with an unrelenting pace (the week, not the quarter)
• Be resilient and resourceful in face of ambiguity and thrive on (rather than endure) change
• Bring critical thought and opinion
• Put AI agents and tools to work on the tasks they're built for, and focus on the work only humans can do
• Embrace differences and disagreement to get shit done and move forward
• Work digital‑first for your daily work

We may use AI‑enabled tools to screen, select, and assess applications. All AI outputs are reviewed and validated by our recruitment team.

Shopifyhttps://www.shopify.com

Work with us in your early career

Dev Degree Program

A 3‑4‑year program that allows people to earn a computer science degree while working. It’s designed for those looking to break into computer science or transition into the tech field.

Learn more about our Dev Degree Program

Internship Program

Shopify offers 4-month paid Engineering internships that are open to students, recent graduates, and those early in their careers.

Learn more about our Internship Program

APM Program

Shopify’s 12‑month Apprentice Product Manager program is designed to help you gain the skills needed to start a product management career.

Learn more about our APM Program

Design Apprentice Program

Shopify's 6-month Design Apprentice Program pairs early‑career designers with senior mentors through two rotations. Built for new graduates, career switchers, and those early in their design careers.

Learn more about our Design Apprentice Program

• Terms of Service
• Privacy Policy