Remote Security Engineer: IR, Detection & AI Automation

Five9 Inc.; Northern (KY); Hybrid; USD 66,000 - 175,000; Full time

Benefits offered by this job

Health, dental, and vision coverage

401k with employer matching

Paid time off

Job summary

Five9 Inc. seeks an experienced security professional to lead triage-focused work including incident response, detection engineering, and IR automation. You will build AI-assisted tooling for the triage pipeline and contribute to threat hunting initiatives.

Role requires coding ability in Python and a strong grasp of telemetry sources (EDR, cloud, identity, network) with a willingness to work Pacific Time hours. Hybrid/remote options apply depending on location.

Qualifications

• Hands-on security operations experience, including incidents you can walk through in detail.
• Proficiency in at least one scripting language (Python or equivalent) and a preference for solving recurring problems with code.
• Working knowledge of detection logic, log pipelines, and modern telemetry sources: EDR, identity, cloud, network, and SaaS.
• Ability to take an ambiguous problem, define what done looks like, build it.
• Clear written communication: incident timelines, design notes, and postmortems.

Responsibilities

• Incident response: Own incidents end to end: scoping, containment, forensics, write-up, and remediation follow-through.
• Detection engineering: Write, tune, test, and retire detections with version-controlled content.
• IR automation: Build playbooks, integrations, and workflows to remove repeated manual steps.
• Threat intelligence: Track activity and convert it into detections, hunts, and hardening work.
• Threat hunting: Contribute to hypothesis-led threat hunting initiatives.
• AI-assisted development: Build and improve agents, prompts, and enrichment logic behind the triage pipeline.
• Alert triage: Escalations the pipeline surfaces and feedback to improve it.

Skills

Python scripting

Incident response

Threat hunting

IR automation

Detection engineering

Cloud knowledge

Tools

EDR tools

Cloud platforms

Low-code platforms

Job description

Five9 Inc. seeks an experienced security professional to lead triage-focused work including incident response, detection engineering, and IR automation. You will build AI-assisted tooling for the triage pipeline and contribute to threat hunting initiatives.

Role requires coding ability in Python and a strong grasp of telemetry sources (EDR, cloud, identity, network) with a willingness to work Pacific Time hours. Hybrid/remote options apply depending on location.