Remote Security Engineer - AI-Driven Incident Response

five9; USA; Hybrid; USD 66.000 - 175.000; Vollzeit

Zusammenfassung

five9 seeks a security engineer to build and operate the engineering systems behind an AI-enriched security triage process. The role centers on incident response, detection engineering, automation, threat intelligence, hunting, and reliable AI tooling.

You will own security incidents end to end, create, tune, detections, build automation, and translate threat intel into concrete hardening actions. This is a hybrid/remote US role with Pacific Time hours.

Qualifikationen

• Hands-on security operations experience with incident explanations.
• Proficiency in Python or a scripting language to automate recurring problems.
• Knowledge of detections, log pipelines, and telemetry from endpoint, identity, cloud, network, and SaaS sources.
• Ability to define success for ambiguous security problems and build practical solutions.
• Clear written communication for incident timelines, design documentation, and postmortems.
• Self-direction with limited day-to-day supervision.

Aufgaben

• Own security incidents through scoping, containment, forensic investigation, documentation, remediation, and follow-through.
• Create, tune, test, version, measure, and retire detections based on operational outcomes rather than alert volume.
• Build playbooks, integrations, and automated workflows that reduce repetitive response work.
• Track relevant threat activity and turn intelligence into detections, hunting hypotheses, and hardening actions.
• Contribute to hypothesis-driven threat hunting and improve the agents, prompts, and enrichment logic used by the triage pipeline.
• Handle escalations surfaced by the pipeline and feed investigation results back into the system to improve it.

Kenntnisse

Security operations

Python scripting

Incident response

Detections & telemetry

Cloud/AWS/GCP knowledge

Automation tooling (Tines / n8n)

Tools

Tines

n8n

Jobbeschreibung

five9 seeks a security engineer to build and operate the engineering systems behind an AI-enriched security triage process. The role centers on incident response, detection engineering, automation, threat intelligence, hunting, and reliable AI tooling.

You will own security incidents end to end, create, tune, detections, build automation, and translate threat intel into concrete hardening actions. This is a hybrid/remote US role with Pacific Time hours.