Senior Security Analyst

23andMe; Palo Alto (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health plans

Family planning support

Mental healthcare

Student loan assistance

Dog friendly office

Flexible time off

Job summary

23andMe is seeking a Senior Security Analyst to join the Security Operations team in Palo Alto. You will lead security incident response, act as Incident Commander, triage alerts, investigate incidents, and improve threat detection to protect data.

You will collaborate with Engineering, IT, and security teams, design runbooks, automate workflows, and monitor metrics. On-call rotation may apply with bonus.

Qualifications

• 4+ years in security operations or incident response.
• Hands-on threat detection, hunting, and incident response.
• Excellent written and verbal communication under pressure.
• Hands-on with EDR, SIEM, and enterprise tools listed.

Responsibilities

• Lead security incident response as Incident Commander.
• Triage, investigate, and prioritize alerts; filter noise.
• Design, build, and tune threat detection and hunting.
• Track incidents; ensure timely corrective actions and metrics.
• Automate workflows and integrations to speed responses.
• Participate in on-call rotation; potential on-call bonus.

Skills

Incident response

Threat detection

Threat hunting

Communication skills

Cross-functional collaboration

Scripting

Education

Bachelor’s degree in CS/IS or related field

Tools

EDR

SIEM

Okta

AWS

CrowdStrike/SentinelOne

Datadog

Sumo Logic

Splunk

AI tools (Claude, Bedrock, Copilot, OpenAI)

Job description

• 23andMe Research Institute is looking for an experienced Senior Security Analyst to join our Security Operations team
• In this role you will lead security incident response as Incident Commander, triage and investigate alerts, and design and build threat detection to help protect our customer and corporate data
• You will bring critical thinking skills, hands-on experience, and the ability to work with and influence cross-functional teams
• Serve as Incident Commander during security incidents; coordinate and drive the response across cross-functional teams
• Manage and improve the incident response workflow, runbooks, and playbooks
• Triage, investigate, and prioritize alerts; separate true events from background noise
• Design, build, and tune threat detection, and conduct threat hunting
• Track open incidents, ensure timely completion of corrective and preventive actions, and report on incident related metrics
• Identify automation opportunities and build integrations to speed up response
• Participate in an on-call rotation; eligible for an additional on-call bonus
• Collaborate across Engineering, IT, and security teams to solve challenging problems

Benefits

• Comprehensive health, vision, and dental plans
• Family planning, support, and leave for parents
• Mental healthcare
• Student loan assistance
• Dog friendly office
• Flexible time off

• 4+ years of relevant security operations or incident response experience
• Hands-on experience with threat detection, threat hunting, and incident response
• Exceptional verbal and written communication skills, with the ability to stay composed under incident pressure and work effectively with technical and non-technical audiences
• Hands-on experience and proficiency with EDR, SIEM, and enterprise tools such as Okta, AWS, CrowdStrike/SentinelOne, Datadog, Sumo Logic, Splunk,and AI tools (Claude, Bedrock, Copilot, OpenAI, etc.)
• Bachelor’s degree in Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience
• Familiarity with one or more scripting languages and with common operating systems