Remote Security Engineer - AI-Driven Incident Response

Five9; United States; On-site; USD 66,000 - 175,000; Full time

Benefits offered by this job

Health, dental, vision coverage

401k with employer matching

Paid time off & holidays

Stock purchase plan

Parental leave 12 weeks

Mental health support platform

Job summary

Five9 is seeking an embedded security engineering professional to join our cloud contact center platform. The role focuses on triage, incident response, detection engineering, automation, threat intel, and AI tooling for the triage pipeline.

You will work PT hours (Pacific Time) and contribute to building scalable defense tooling while writing code and partnering with a distributed team. Fully remote for some locations; hybrid option for others within the US.

Qualifications

• Hands-on security operations experience with incidents you can detail.
• Proficiency in at least one scripting language (Python) and solving recurring problems with code.
• Working knowledge of detection logic, log pipelines, and telemetry sources (EDR, identity, cloud, network, SaaS).
• Ability to define done for ambiguous problems and build it end-to-end.
• Clear written communication: incident timelines, design notes, and postmortems.

Responsibilities

• Incident response: scope, containment, forensics, write-up, remediation follow-through.
• Detection engineering: write, tune, test, retire detections; version-controlled and outcome-driven.
• IR automation: build playbooks, integrations, and workflows to remove manual steps.
• Threat intelligence: track activity and convert it into detections, hunts, hardening work.
• Threat hunting: contribute to hypothesis-led threat hunting initiatives.
• AI-assisted development: improve agents, prompts, and enrichment logic behind the triage pipeline.
• Alert triage: manage escalations and provide feedback to improve the system.

Skills

Python

Incident response

Detection engineering

IR automation

Threat intelligence

Threat hunting

AI tooling

Tools

Tines

n8n

Job description

Five9 is seeking an embedded security engineering professional to join our cloud contact center platform. The role focuses on triage, incident response, detection engineering, automation, threat intel, and AI tooling for the triage pipeline.

You will work PT hours (Pacific Time) and contribute to building scalable defense tooling while writing code and partnering with a distributed team. Fully remote for some locations; hybrid option for others within the US.