Remote Threat Detection & Response Engineer — IR & SOC

Whatnot; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health Insurance

401(k) with employer match

Work From Home Support

Parental Leave

Flexible Time off

Job summary

Whatnot seeks a Threat Detection and Response Engineer to lead incident response efforts and work with security and business partners to contain threats. You will identify detection opportunities, create playbooks, and support new security technology deployments.

The role requires 5+ years in cyber incident response, strong communication, and experience with SOAR, SIEM, and cloud providers (AWS, GCP). Remote-friendly with US hub offices available.

Qualifications

• Minimum 5+ years in cyber incident response or related cyber field.
• Experience with security principles and defense-in-depth techniques.
• Strong written communication to document and report incidents.

Responsibilities

• Lead incident response and drive cyber incident containment and eradication.
• Collaborate with Information Security and business teams for rapid response.
• Develop playbooks and improve incident response processes and SOPs.
• Analyze threat intelligence to mitigate risks and report health metrics.

Skills

Security incident response

Threat detection

On-call duties

Communication skills

Education

Bachelor’s degree in CS or related field

Tools

SOAR (Tines)

EDR/NDR

SIEM Chronicle

Cloud: AWS, GCP

Job description

Whatnot seeks a Threat Detection and Response Engineer to lead incident response efforts and work with security and business partners to contain threats. You will identify detection opportunities, create playbooks, and support new security technology deployments.

The role requires 5+ years in cyber incident response, strong communication, and experience with SOAR, SIEM, and cloud providers (AWS, GCP). Remote-friendly with US hub offices available.