Security Engineer, Incident Response

Peloton; New York; On-site; USD 112,300 - 151,500; Full time

Benefits offered by this job

Medical, dental and vision insurance

Generous paid time off

401k

Employee Stock Purchase Plan

Job summary

Peloton in New York City is seeking a Security Engineer to help evolve our security program. You will develop detections, automate threat workflows, and contribute to playbooks while collaborating with the Security Operations Center and Engineering teams to scale security across the company.

The role focuses on threat hunting, incident response, AI-assisted development of security tooling, and translating threat intelligence into prioritized defensive controls.

Qualifications

• Minimum 3 years in Information Security.
• Experience in incident response or threat detection.
• Knowledge of cloud environments AWS, GCP, Azure, and Kubernetes.
• Experience with automation for alert intake/triage/incident handling.
• Expert experience with SIEM tools or data lakes.
• Experience with dissecting attacker methodologies and EDR tooling.
• Excellent analytical and problem solving skills.
• Comfortable using AI coding tools to build security solutions.

Responsibilities

• Directly support Peloton’s security program and conduct threat hunting using intelligence data.
• Develop detections and baseline user behaviors with Security Engineering and SOC.
• Provide triage support for incident response and investigations.
• Design and ship homegrown security tooling leveraging AI-assisted development.
• Translate threat intelligence into prioritized, actionable controls.

Skills

Analytical skills

Problem solving

Learning mindset

Self-driven

Strong results focus

Education

Security certifications: GCIH, GCFE, GCIA, GCFA, AWS Security Specialty

Tools

SIEM tools

Data lakes

EDR tooling

Automation tooling for Alert Triage/Incident Handling

AI coding tools

Job description

ABOUT THE ROLE

Peloton continues to grow and deliver the connected fitness platform of the future to help our members be the best version of themselves. As a technology-enabled business, our approach to security operations must evolve and grow alongside our services and members. We are looking for a Security Engineer with a diverse set of skills that can thrive in a challenging, fast-paced, and rewarding environment. We do not have a traditional SOC tier structure, so you can expect to help us improve our detections as well as create additional detections, build automations, and research & help define the solutions roadmap to achieve scale. The right candidate should have a strong focus on results, be self‑driven, and be excited by working on a diverse set of problems, threats, and alerts.

YOUR DAILY IMPACT AT PELOTON

• Directly support Peloton’s Security Program while conducting in-depth research and strategic analysis of intelligence data from various sources to leverage in threat hunting
• Stay up to date with relevant vulnerabilities, threat actors, indicators of compromise (IOCs) tactics, techniques, and procedures (TTPs), and trends, identifying actionable areas of interest and threats
• Provide intel-driven insights into existing and emerging threats, use insights to search Peloton enterprise for activity that is anomalous and/or malicious
• Work with Security Engineering and the Security Operations Center to baseline user behaviors and events as well as build out new detections and response workflows
• Provide triage support for incident response and investigation efforts as part of Peloton’s Security and Operations team and other internal teams
• Recommend and build countermeasures based on threat analysis, intelligence, and forecasting
• Develop, implement, and maintain security incident playbooks/runbooks
• Prepare and present analysis with findings and recommendations in the form of briefings, reports, and dashboards to managers, various team leads and senior leadership as required
• Identify repetitive, high-volume SOC workflows and systematically eliminate them through AI-powered triage pipelines, LLM-assisted investigation, and end-to-end automation
• Design and ship homegrown security tooling where commercial solutions fall short, owning the full lifecycle from requirements through iteration — leveraging AI-assisted development to move fast and maintain high quality
• Translate threat intelligence and incident learnings into prioritized, actionable control recommendations that reduce risk without slowing the business
• Things to consider:
  • We’re a high-growth company, and our processes are in various states of maturity
  • We’re doing a lot really fast - you may be asked to flex outside of your role from time to time. On the other hand, we believe in appropriate work/life balance, and you’ll be asked regularly to gauge your capacity against new efforts to prevent overloading

YOU BRING TO PELOTON

• Minimum 3 years in Information Security
• Experience in incident response or threat detection required; we value in-depth knowledge of cloud environments (AWS, GCP, Azure, Kubernetes), SaaS platforms (O365, Google Workspace), or IAM
• Strong knowledge of Incident Response principles and processes
• Experience with Automation specifically for Alert Intake/Triage/Incident Handling
• Expert experience with SIEM tools or data lakes
• Experience with dissecting attacker methodologies and techniques and/or EDR tooling
• Excellent analytical and problem solving skills
• Comfortable using AI coding tools as a primary development accelerator to build and ship homegrown security solutions
• A learning mindset and excitement for learning new technologies or security areas
• Relevant certifications: GCIH, GCFE, GCIA, GCFA, AWS Security Specialty

#LI-DD1 #LI-Hybrid

The base salary range represents the low and high end of the anticipated salary range for this position based at our New York City headquarters. The actual base salary offered for this position will depend on numerous factors including, without limitation, experience and business objectives and if the location for the job changes. Our base salary is just one component of Peloton’s competitive total rewards strategy that also includes annual equity awards and an Employee Stock Purchase Plan as well as other region‑specific health and welfare benefits.

As an organization, one of our top priorities is to maintain the health and wellbeing for our employees and their family. To achieve this goal, we offer robust and comprehensive benefits including:

• Medical, dental and vision insurance
• Generous paid time off policy
• Short‑term and long‑term disability
• Access to mental health services
• 401k, tuition reimbursement and student loan paydown plans
• Employee Stock Purchase Plan
• Fertility and adoption support and up to 18 weeks of paid parental leave
• Child care and family care discounts
• Free access to Peloton Digital App and apparel and product discounts
• Commuter benefits and Citi Bike Discount
• Pet insurance and so much more!

Base Salary Range

$112,300—$151,500 USD

ABOUT PELOTON:

Peloton (NASDAQ: PTON) provides Members with expert instruction, and world class content to create impactful and entertaining workout experiences for anyone, anywhere and at any stage in their fitness journey. At home, outdoors, traveling, or at the gym, Peloton brings together innovative hardware, distinctive software, and exclusive content. Founded in 2012 and headquartered in New York City, Peloton has millions of Members across the US, UK, Canada, Germany, Australia, and Austria. For more information, visit www.onepeloton.com.

Peloton is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. Equal employment opportunity has been, and will continue to be, a fundamental principle at Peloton, where all team members, applicants, and other covered persons are considered on the basis of their personal capabilities and qualifications without discrimination because of race, color, religion, sex, age, national origin, disability, pregnancy, genetic information, military or veteran status, sexual orientation, gender identity or expression, marital and civil partnership/union status, alienage or citizenship status, creed, genetic predisposition or carrier status, unemployment status, familial status, domestic violence, sexual violence or stalking victim status, caregiver status, or any other protected characteristic as established by applicable law. This policy of equal employment opportunity applies to all practices and procedures relating to recruitment and hiring, compensation, benefits, termination, and all other terms and conditions of employment. If you would like to request any accommodations from application through to interview, please email: [e-mail].

At Peloton, we embrace technology, including AI, to enhance productivity and accelerate innovation in the work we do for our members. However, in our hiring process, our priority remains in getting to know you and your unique qualifications. To ensure a fair and equitable process, we do not permit the use of AI tools during any stage of the application and interview process. In considering you as an applicant, we want to understand your skills, experiences, and motivations without mediation through an AI system. We also want to directly assess your communication skills without the use of an AI tool.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance and the San Francisco Fair Chance Ordinance, as applicable to applicants applying for positions in these jurisdictions.