Senior Threat Detection & Incident Response Engineer

Whatnot; Los Angeles (CA); Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health Insurance

WFH Support

Home office setup

Cell phone allowance

Internet allowance

Wellness allowance

Childcare allowance

401k with employer match

Job summary

Whatnot is seeking a Threat Detection and Response Engineer to join our security team in Los Angeles. You will own incident response across endpoints and cloud, drive playbooks, and partner with IR analysts and product teams to quickly contain threats and strengthen defenses.

Ideal candidates have 5+ years in cyber incident response and hands-on experience with SOAR, Chronicle SIEM, and multi-cloud environments (AWS, GCP). Strong written communication and on-call willingness are essential.

Qualifications

• Bachelor's degree in Computer Science, Information Security, a related field, or equivalent work experience.
• 5+ years’ experience in cyber incident response or similar cyber field.
• Experience with security concepts, SOAR(Tines), EDR, NDR and SIEM (Chronicle).
• Experience with multiple Cloud Service Providers (AWS, GCP).
• Excellent written communication skills to document, communicate, and report security incidents to leadership.
• On-call duties expected.

Responsibilities

• Apply comprehensive knowledge of Incident Response concepts and technical capabilities.
• Collaborate with Information Security and partners for rapid response.
• Act as escalation point within the Incident Response team.
• Identify detection opportunities, create playbooks, support new tech implementations.
• Analyze threat intelligence to mitigate risks.
• Report SOC health via metrics, OKRs, and risk indicators.

Skills

Cyber incident response

Defense-in-depth

SOAR (Tines)

EDR/NDR/SIEM

AWS/GCP

Written communication

On-call duties

Education

Bachelor's degree in Computer Science or Information Security or related field

Tools

SOAR (Tines)

EDR

NDR

Chronicle SIEM

AWS

GCP

Job description

Whatnot is seeking a Threat Detection and Response Engineer to join our security team in Los Angeles. You will own incident response across endpoints and cloud, drive playbooks, and partner with IR analysts and product teams to quickly contain threats and strengthen defenses.

Ideal candidates have 5+ years in cyber incident response and hands-on experience with SOAR, Chronicle SIEM, and multi-cloud environments (AWS, GCP). Strong written communication and on-call willingness are essential.