AI-Powered Security Engineer: Detections, Incidents & Remediation

Mixpanel, Inc.; San Francisco (CA); On-site; USD 160,000 - 210,000; Full time

Benefits offered by this job

Comprehensive Medical, Vision, and  D​

Vacation Policy & Company Holidays

Enhanced Parental Leave

Pre-Tax Benefits: 401(k), Wellness

Job summary

Mixpanel, Inc. is seeking a Security Engineer to run security operations, including vulnerability management, detection and monitoring, and incident response. You’ll collaborate with engineering to remediate risks, tune detections, and leverage AI for faster triage.

This hands-on role offers a path toward Senior Security Engineer as you grow within the ISRM team in the SF Bay Area. Ideal candidates have 3–5 years in security engineering, strong vulnerability management, SIEM experience, and

Qualifications

• 3-5 years of experience in security engineering, security operations, detection and response, or a related role.
• Hands-on vulnerability management experience, including triaging and validating scanner and pentest findings and working with engineers to remediate them.
• Experience working in a SIEM (e.g. Splunk, Google SecOps/Chronicle, Panther, Elastic), including writing queries and building or tuning detections.
• Experience investigating and responding to security incidents.
• Understanding of common attack techniques and how to detect them, for example using MITRE ATT&CK.
• Working knowledge of cloud security in GCP or AWS, including IAM, audit logging, and common misconfigurations.
• Scripting skills in Python, Go, or a similar language to automate tasks and work with log data.
• Hands-on experience using AI tools (e.g. Claude Code) to automate security workflows, or a strong interest in building that skill.
• Sound judgment on severity and risk, including knowing when to upscale and when an issue can wait.
• Ability to explain security issues clearly to engineers and get fixes prioritized without slowing teams down unnecessarily.
• Strong written communication and follow-through, with the ability to manage many concurrent items and work independently.

Responsibilities

• Vulnerability management: Triage findings from vulnerability scanners, penetration tests, bug bounty reports, and dependency tooling.
• Remediation with engineering: Work with engineering teams to agree on fixes and timelines, track each vulnerability through to closure within SLA, and elevate items at risk of missing it.
• Detection and monitoring: Build, tune, and maintain detections in our SIEM across cloud, identity, endpoint, and application logs, and cut false positives so on-call time goes to real threats.
• AI-assisted security operations: Use AI tools to speed up alert triage, enrich investigations, write and test detection logic, and automate repetitive SecOps work.
• Incident response: Investigate and respond to security incidents from first alert through containment, eradication, and recovery, and write clear post-incident reviews with follow-up actions.
• Coverage and runbooks: Identify gaps in log sources and detection coverage, onboard new sources, and keep runbooks current so the team responds consistently.
• On-call: Take part in the security on-call rotation.

Skills

Vulnerability management

SIEM detection & response

Incident response

AI-assisted SecOps

Cloud security (GCP/AWS)

Python/Go scripting

Communication & collaboration

On-call experience

MITRE ATT&CK

Tools

Splunk

Google SecOps/Chronicle

Panther

Elastic

EDR tools: CrowdStrike

SentinelOne

SOAR: Tines/Torq

Kubernetes

Job description

Mixpanel, Inc. is seeking a Security Engineer to run security operations, including vulnerability management, detection and monitoring, and incident response. You’ll collaborate with engineering to remediate risks, tune detections, and leverage AI for faster triage.

This hands-on role offers a path toward Senior Security Engineer as you grow within the ISRM team in the SF Bay Area. Ideal candidates have 3–5 years in security engineering, strong vulnerability management, SIEM experience, and