senior cybersecurity incident response engineer (Remote, US)

Starbucks Corp.; Seattle (WA); Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Parental leave

Paid vacation and holidays

401(k) with company match

Starbucks equity program (Bean Stock)

Tuition coverage via Starbucks College

Job summary

Starbucks Coffee Company is seeking a Senior Incident Response Engineer to lead and execute cybersecurity investigations, from threat identification to remediation and root-cause analysis. You will conduct endpoint, network, and cloud forensics, develop runbooks, and build automation to improve response speed.

A strong mentor mindset and stakeholder communication are essential to success. Join a collaborative team that values integrity, excellence, and continuous learning, with opportunities to

Qualifications

• 5+ years in Information Technology or Information Security
• 2+ years in SOC/Incident Response or similar capacity
• Strong written and verbal communication for technical and non-technical audiences
• Deep technical understanding of modern cybersecurity principles
• Experience with threat hunting for MITRE ATT&CK TTPs
• Ability to balance priorities and meet deadlines
• Willingness to learn new technologies
• Understanding of SOX/PCI regulatory requirements
• Collaborative mindset and problem-solving skills
• Passion for cybersecurity and self-driven development

Responsibilities

• Identify and investigate security threats across Starbucks networks and endpoints.
• Lead incident response efforts, coordinating containment, remediation and root cause analysis.
• Perform forensic analysis on endpoints, networks, or cloud environments.
• Create and maintain playbooks and standard operating procedures for consistent response.
• Build tools and automation to speed up incident response.
• Support and mentor junior team members, ensuring high-quality work.
• Model Starbucks values and foster collaboration and integrity.

Skills

Incident response

Threat hunting

MITRE ATT&CK

Forensic analysis

SOC experience

Communication

Collaboration

Problem-solving

Learning new tech

Regulatory compliance (SOX/PCI)

Tools

SIEM

EDR

Cloud forensics

Job description

Now Brewing – Incident Response Engineer Sr! #tobeapartnerFrom the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection.As an Incident Response Engineer Sr, you will be responsible for managing and running cyber security incident investigations across Starbucks.As an Incident Response Engineer Sr, you will:Identify and investigate security threats: You'll be the first line of defense, identifying, triaging, and digging into potential security incidents.Leading incident response efforts: When something goes wrong, you’ll help coordinate containment, remediation, and root cause analysis to ensure we resolve issues quickly and learn from them.Performing forensic analysis: Whether it’s on endpoints, across the network, or in the cloud, you’ll conduct forensic investigations to uncover how incidents occurred and what was affected.Creating and maintaining playbooks: You’ll document and implement runbooks and standard operating procedures to make sure our response efforts are consistent and efficient.Building tools and automation: You’ll design and develop capabilities that help us respond faster and smarter, including automation to streamline repetitive tasks.Supporting the team: You’ll act as a mentor and escalation point for junior team members, helping them grow and ensuring high-quality work across the board.Living our values: You’ll model and act in accordance with Starbucks’ guiding principles, contributing to a culture of integrity, collaboration, and excellence.We’d love to hear from people with:5 or more years of experience in Information Technology, Information Security or similar disciplines.2 additional years of experience in a Security Operations Center (SOC), Incident Response, or similar capacity responding to alerts and/or incidents.Effective written and oral communication skills with both technical and non-technical audiences.Deep technical understanding of modern Cybersecurity principles.Demonstrated experience with threat hunting for threat actor TTPs based on MITRE ATT&CK frameworkAbility to balance multiple priorities and meet deadlines.Ability to quickly learn new technology concepts.Understanding of compliance and regulatory requirements such as SOX and PCI.Strong collaboration mindsetExcellent problem-solving abilities.Passionate about cybersecurity and self-driven to become an expert.This position contributes to Starbucks’ success through the investigation and response to cybersecurity incidents. You should have strong problem-solving skills, excellent communication skills, a deep technical understanding of modern cybersecurity threats and relevant protections against them. You consistently demonstrate ownership; if you see a problem, you step up and lead others to act; never assuming someone else will clean it up. You excel in collaborative environments where a multitude of people are required to get a job done.As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools. Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities. You will also have access to backup care and DACA reimbursement. Starbucks will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies. This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative. For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com.*If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above. For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above.The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, geographical location, and internal equity. At Starbucks, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate.Join us and inspire with every cup. Apply today!Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law.Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.Starbucks Coffee Company is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at [e-mail] or 1(888) 611-2258.