Detection & Response Security Engineer

Betterment; New York (NY); Hybrid; USD 145,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Equity for employees

Day-one 401(k) match

Flexible paid time off

Job summary

Betterment is seeking a Security Engineer to join the Detect and Respond team in NYC. You will build and operate detection capabilities, integrate logs into our SIEM, and contribute to incident response in a collaborative, engineering-forward environment.

You will work on high-signal detections, automate on-call tasks, and help advance AI-assisted security across Betterment’s cloud and SaaS stack.

Qualifications

• 3+ years in security operations or security engineering.
• Experience with SIEM and SOAR platforms, including writing searches and alerts.
• Familiarity with ATT&CK framework and turning threat behavior into detections.
• Exposure to incident response and triage activities.
• Proficient in programming or scripting; comfortable reading and writing code.
• Interest in AI tools and responsible adoption, with ability to verify outputs.
• Experience with cloud environments (AWS) and common security tools.

Responsibilities

• Build and evolve detection and response capabilities across the infrastructure with a focus on high-signal detections.
• Improve detections using on-call feedback and false-positive trends.
• Integrate SaaS application logs into the SIEM and coordinate with other teams.
• Participate in security on-call cycles and improve triage processes.
• Contribute to SIEM administration, lookups, integrations, and alert hygiene.
• Develop automations to streamline on-call tasks and reduce manual toil.
• Incorporate AI tooling into detections and triage, with careful validation.
• Expand detection coverage for AI-related activity and data transfers.
• Collaborate with AI Governance and Workforce Security partners as the surface grows.
• Review new systems for telemetry needs and detection opportunities before deployment.
• Support incident response including triage, investigation, and containment.

Skills

SIEM/SOAR platforms

MITRE ATT&CK familiarity

Incident response

Programming / scripting

AI tooling awareness

Security engineering

Written communication

Tools

CrowdStrike

Okta

AWS

Job description

Betterment is seeking a Security Engineer to join the Detect and Respond team in NYC. You will build and operate detection capabilities, integrate logs into our SIEM, and contribute to incident response in a collaborative, engineering-forward environment.

You will work on high-signal detections, automate on-call tasks, and help advance AI-assisted security across Betterment’s cloud and SaaS stack.