Remote Security Engineer - IR, Detection & Hunting

Socket.dev; United States; Hybrid; USD 66,000 - 175,000; Full time

Benefits offered by this job

Health, dental, and vision coverage

401k with employer matching

Paid Time Off

Parental leave

Stock purchase plan

Job summary

Five9 is seeking a security operations professional to own incidents end to end, write detections, automate response, and contribute to threat intel and hunting initiatives.

You will build AI-assisted triage and enrichment, work across EDR, cloud, identity, and network telemetry, and help reduce incident duration with scalable playbooks. Compensation ranges from $66,300 to $174,700 USD across the United States, with remote/hybrid options.

Qualifications

• Hands-on security operations experience with incidents you can walk through in detail.
• Proficiency in at least one scripting language and a habit of solving recurring problems with code.
• Working knowledge of detection logic, log pipelines, and telemetry sources (EDR, identity, cloud, network, SaaS).
• Ability to define done, build it, and communicate clearly in incident timelines and postmortems.

Responsibilities

• Incident response: scoping, containment, forensics, write-up, remediation follow-through.
• Detection engineering: write, tune, test, retire detections; version-controlled and outcome-driven.
• IR automation: build playbooks, integrations, and workflows to reduce manual steps.
• Threat intelligence: track activity and convert into detections, hunts, hardening work.
• Threat hunting: contribute to hypothesis-led hunting initiatives.
• AI-assisted development: improve agents, prompts, and enrichment for triage.
• Alert triage: manage escalations and feedback to improve pipelines.

Skills

Python

Incident response

Detection engineering

Threat hunting

Tools

GCP

AWS

n8n

Tines

LLM tooling

Job description

Five9 is seeking a security operations professional to own incidents end to end, write detections, automate response, and contribute to threat intel and hunting initiatives.

You will build AI-assisted triage and enrichment, work across EDR, cloud, identity, and network telemetry, and help reduce incident duration with scalable playbooks. Compensation ranges from $66,300 to $174,700 USD across the United States, with remote/hybrid options.