Security Engineer

Upwind Security; San Francisco (CA); On-site; USD 90,000 - 140,000; Full time

Job summary

Upwind Security is seeking a Security Analyst to join our MDR team, focusing on proactive reviews and advanced guidance for customers. You will work closely with analysts, researchers, and engineers to strengthen cloud posture and detections.

The role emphasizes improving detection quality, incident handling, and collaboration across teams to translate complex findings into clear, actionable recommendations for clients.

Qualifications

• 1+ year of experience in cybersecurity, preferably in cloud or containerized environments.
• Knowledge of detection engineering, incident response, or threat analysis.
• Familiarity with Linux, networking fundamentals, and scripting (Python/Bash).
• Exposure to cloud platforms (AWS/GCP/Azure) and container technologies (Docker/Kubernetes).
• Strong communication and presentation skills, with the ability to engage directly with customers.
• Ability to work under pressure and manage multiple tasks in a fast-paced environment.
• Curiosity, problem-solving mindset, and willingness to learn and grow.
• B.Sc. in Computer Science / Information Security - an advantage.

Responsibilities

• Assist in fine-tuning Upwind’s detection and response mechanisms.
• Support proactive reviews of customer environments to identify risks, exposed attack surfaces, and recommend improvements.
• Lead and conduct in-depth security investigations, documenting outcomes and developing playbooks to enhance future detection and response.
• Collaborate with Security Analysts, Research, and Backend teams to enhance detection quality.
• Contribute to the handling of complex or critical incidents escalated from Tier 1/2.
• Participate in recurring customer meetings, helping translate security findings into clear, actionable recommendations.
• Stay up to date with emerging threats, attack techniques, attack surfaces, and best practices in cloud security.
• Contribute to the development and training of AI-driven detection models, leveraging machine learning to improve investigation accuracy and response efficiency.

Skills

Cybersecurity experience

Detection engineering

Incident response

Linux

Networking fundamentals

Scripting (Python/Bash)

Cloud platforms (AWS/GCP/Azure)

Docker/Kubernetes

Communication skills

Work under pressure

Curiosity & problem-solving

B.Sc. in Computer Science/InfoSec

Education

B.Sc. in Computer Science / Information Security

Job description

Description

Upwind is a next-generation Cloud Security Platform that leverages runtime context to identify and prioritize critical risks, providing precise insights and efficient cloud security management. Unlike traditional tools, Upwind uses runtime data proactively for risk prioritization and posture insights, ensuring teams focus on what truly matters. With industry-leading efficiency and eBPF-powered sensors, Upwind delivers comprehensive capabilities, including agentless cloud posture discovery, real-time threat protection, and integrated API security. From misconfigurations to malware defense, Upwind ensures end-to-end, cost-effective cloud infrastructure protection. At Upwind, you’ll have the opportunity to think creatively, explore new ideas, and use your skills to make a meaningful impact on our growth.

We are looking for a Security Analyst to join our MDR team. In this role, you will be part of our security function, focusing on proactive reviews and providing advanced guidance to customers. This is an opportunity to develop your expertise in cloud security while working closely with analysts, researchers, and engineers.

Responsibilities

• Assist in fine-tuning Upwind’s detection and response mechanisms.
• Support proactive reviews of customer environments to identify risks, exposed attack surfaces, and recommend improvements.
• Lead and conduct in-depth security investigations, documenting outcomes and developing playbooks to enhance future detection and response.
• Collaborate with Security Analysts, Research, and Backend teams to enhance detection quality.
• Contribute to the handling of complex or critical incidents escalated from Tier 1/2.
• Participate in recurring customer meetings, helping translate security findings into clear, actionable recommendations.
• Stay up to date with emerging threats, attack techniques, attack surfaces, and best practices in cloud security.
• Contribute to the development and training of AI-driven detection models, leveraging machine learning to improve investigation accuracy and response efficiency.

Requirements

• 1+ year of experience in cybersecurity, preferably in cloud or containerized environments.
• Knowledge of detection engineering, incident response, or threat analysis.
• Familiarity with Linux, networking fundamentals, and scripting (Python/Bash).
• Exposure to cloud platforms (AWS/GCP/Azure) and container technologies (Docker/Kubernetes).
• Strong communication and presentation skills, with the ability to engage directly with customers.
• Ability to work under pressure and manage multiple tasks in a fast-paced environment.
• Curiosity, problem-solving mindset, and willingness to learn and grow.
• B.Sc. in Computer Science / Information Security - an advantage.