Incident Response Security Engineer

United States Digital Space LLC; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Open source contributions

Certifications (AWS/GCP/Azure)

Job summary

United States Digital Space LLC is seeking an experienced security practitioner to drive adoption of modern security processes and tooling, with a focus on detection and incident response across application, cloud and enterprise security.

You will develop processes, tooling and automation to scale incident management, collaborate with security, engineering, product, support, and business operations, and apply a threat modeling centric approach to detect and respond to threats.

Qualifications

• Background in product security, red teaming, or pentesting with incident detection and response experience.
• Experience with cloud providers: AWS, GCP or Azure.
• Excellent written and verbal communication skills.
• Experience securing large-scale customer-facing cloud infrastructures.
• Development and automation experience; Golang and Python preferred.

Responsibilities

• Develop processes, tooling and automation to scale incident management response and mitigate risks to the business.
• Collaborate with security functions, engineering, product, support, and business ops to identify detection use cases and automation.
• Apply a threat modeling centric approach to incident detection and response.
• Maintain security logging platform.
• Stay up to date with threats to improve detection mechanisms and attack surface management.
• Handle information security events and incidents across the company products and services.

Skills

Security incident response

Threat modeling

Penetration testing

Red teaming

Cloud security

Automation

Golang

Python

Communication

Large-scale cloud infra

Education

BS/MS/PhD in Computer Science or related field

Tools

AWS (cloud provider)

GCP

Azure

Job description

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.

What you will do:

• Develop processes, tooling and automation to scale incident management response and mitigate risks to the business
• Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation
• Apply a threat modeling centric approach to incident detection and response
• Maintain security logging platform
• Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management
• Handle information security events and incidents across the the company products and services

What you bring along:

• Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience
• Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)
• Excellent written and verbal communication skills
• Experience securing large-scale customer-facing cloud infrastructures
• Significant development and automation experience; preference for Golang and Python

Bonus Points:

• BS, MS, or PhD in Computer Science or related field
• Previous contributions to open source projects
• Security or cloud related certifications (AWS, GCP, Azure)