Threat Detection & Incident Response Engineer

Whatnot; New York (NY); On-site; USD 175,000 - 260,000; Full time

Benefits offered by this job

Health Insurance

Work From Home Support

Home office setup allowance

Cell phone & internet allowance

Wellness stipend

Childcare stipend

401k match (US)

Job summary

Whatnot is seeking a Threat Detection and Response Engineer to join a fast-growing live commerce security team. You will lead incident response across endpoints and cloud, collaborate with information security and business partners, and develop playbooks to defend against evolving threats.

The role requires 5+ years in security and strong documentation and communication skills. The position offers a flexible work model with remote work options and candidates in the US.

Qualifications

• 5+ years’ experience in cyber incident response or related field.
• Experience with security principles and defense-in-depth techniques.
• Experience with SOAR, EDR, NDR and Chronicle SIEM.
• Experience with multiple Cloud Service Providers (AWS, GCP).
• Excellent written communication and ability to report incidents to leaders.

Responsibilities

• Lead Incident Response and forensics across endpoints and cloud environments.
• Collaborate with InfoSec and business partners for rapid, precise responses.
• Develop playbooks, detect opportunities, and defend against evolving threats.
• Report SOC health via metrics, OKRs, and risk indicators to leadership.
• Document incidents from detection to resolution and present findings.

Skills

Incident response

SOAR (Tines)

EDR

NDR

SIEM Chronicle

Cloud: AWS/GCP

Written communication

On-call readiness

Education

Bachelor’s degree in Computer Science / Information Security or related field

Tools

Chronicle SIEM

Tines SOAR

EDR

NDR

Job description

Whatnot is seeking a Threat Detection and Response Engineer to join a fast-growing live commerce security team. You will lead incident response across endpoints and cloud, collaborate with information security and business partners, and develop playbooks to defend against evolving threats.

The role requires 5+ years in security and strong documentation and communication skills. The position offers a flexible work model with remote work options and candidates in the US.