Security Engineer, Incident Response

United States Digital Space LLC; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

United States Digital Space LLC in New York is seeking a Security Engineer to strengthen our security program, focusing on threat hunting, incident response, and automation. You will work across cloud environments, IAM, SaaS platforms, and SIEM data to detect and respond to threats.

You’ll design detections, runbooks, and AI-assisted workflows, collaborating with Security Operations and translating intelligence into concrete controls that protect users and the business.

Qualifications

• Minimum 3 years in Information Security.
• Experience in incident response or threat detection; familiarity with cloud environments and IAM.
• Strong knowledge of incident response principles and processes.

Responsibilities

• Directly support the company’s Security Program and perform threat hunting.
• Research vulnerabilities, IOCs, TTPs, and trends to identify actionable threats.
• Provide intel-driven insights and search for anomalous or malicious activity.
• Collaborate with Security Engineering and SOC to baseline behaviors and build detections.
• Provide triage support for incident response and investigations.
• Develop countermeasures based on threat analysis and forecasting.
• Develop and maintain security incident playbooks and runbooks.
• Present findings and recommendations to managers and leadership.
• Identify repetitive SOC workflows and automate via AI-assisted triage and workflows.
• Design and ship homegrown security tooling across full lifecycle.

Skills

Incident Response

Threat Detection

Cloud Environments

IAM

Automation

SIEM/Data Lakes

O365/Google Workspace

Job description

ABOUT THE ROLE

the company continues to grow and deliver the connected fitness platform of the future to help our members be the best version of themselves. As a technology-enabled business, our approach to security operations must evolve and grow alongside our services and members. We are looking for a Security Engineerwith a diverse set of skills that can thrive in a challenging, fast-paced, and rewarding environment. We do not have a traditional SOC tier structure, so you can expect to help us improve our detections as well as create additional detections, build automations, and research & help define the solutions roadmap to achieve scale. The right candidate should have a strong focus on results, be self-driven, and be excited by working on a diverse set of problems, threats, and alerts.

YOUR DAILY IMPACT AT the company

• Directly support the company’s Security Program while conducting in-depth research and strategic analysis of intelligence data from various sources to leverage in threat hunting
• Stay up to date with relevant vulnerabilities, threat actors, indicators of compromise (IOCs) tactics, techniques, and procedures (TTPs), and trends, identifying actionable areas of interest and threats
• Provide intel-driven insights into existing and emerging threats, use insights to search the company enterprise for activity that is anomalous and/or malicious
• Work with Security Engineering and the Security Operations Center to baseline user behaviors and events as well as build out new detections and response workflows
• Provide triage support for incident response and investigation efforts as part of the company’s Security and Operations team and other internal teams
• Recommend and build countermeasures based on threat analysis, intelligence, and forecasting
• Develop, implement, and maintain security incident playbooks/runbooks
• Prepare and present analysis with findings and recommendations in the form of briefings, reports, and dashboards to managers, various team leads and senior leadership as required
• Identify repetitive, high-volume SOC workflows and systematically eliminate them through AI-powered triage pipelines, LLM-assisted investigation, and end-to-end automation
• Design and ship homegrown security tooling where commercial solutions fall short, owning the full lifecycle from requirements through iteration — leveraging AI-assisted development to move fast and maintain high quality
• Translate threat intelligence and incident learnings into prioritized, actionable control recommendations that reduce risk without slowing the business

• Things to consider:

• We’re a high-growth company, and our processes are in various states of maturity

• We’re doing a lot really fast - you may be asked to flex outside of your role from time to time. On the other hand, we believe in appropriate work/life balance, and you’ll be asked regularly to gauge your capacity against new efforts to prevent overloading

YOU BRING TO the company

• Minimum 3 years in Information Security
• Experience in incident response or threat detectionrequired; we value in-depth knowledge of cloud environments (AWS, GCP, Azure, Kubernetes), SaaS platforms (O365, Google Workspace), or IAM
• Strong knowledge of Incident Response principles and processes
• Experience with Automation specifically for Alert Intake/Triage/Incident Handling
• Expert experience with SIEM tools or data lakes<