Threat Detection & Response Engineer: Incident Leader

Whatnot; San Francisco (CA); Hybrid; USD 175,000 - 260,000; Full time

Benefits offered by this job

Health Insurance (Medical, Dental, Vis

Work From Home Support

Home office setup allowance

Cell phone & internet monthly stipend

401k with employer match up to 4% (US)

Parental Leave - 16 weeks

Holiday and Time offPolicy

Dog-friendly budget / dogfood the app

Job summary

Whatnot is seeking a Threat Detection and Response Engineer to join our security team. You will lead incident response activities across endpoints and cloud, triage threats, and drive playbooks to contain and eradicate incidents.

The role requires deep IR experience, strong communication, and the ability to collaborate with product and business leaders. Based in our US hub or remote-friendly setup, you’ll contribute to a defense-in-depth security program and mentor teammates while improving

Qualifications

• Minimum 5+ years in security, preferably in a large enterprise environment.
• Experience with cyber incident response and defense-in-depth techniques.
• Strong written communication and ability to report security incidents to leadership.

Responsibilities

• Perform incident triage, incident response, and forensic investigations across endpoints and cloud environments.
• Document incidents from detection through resolution and present findings to stakeholders.
• Create and improve incident response playbooks and standard operating procedures.
• Investigate, document, and report on cyber security issues.
• Provide IR support to contain and eradicate threats; collaborate with security and business teams.

Skills

Incident Response

SOAR

EDR

NDR

SIEM

Cloud Security

Written Communication

On-call Duties

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Chronicle SIEM

Tines (SOAR)

Job description

Whatnot is seeking a Threat Detection and Response Engineer to join our security team. You will lead incident response activities across endpoints and cloud, triage threats, and drive playbooks to contain and eradicate incidents.

The role requires deep IR experience, strong communication, and the ability to collaborate with product and business leaders. Based in our US hub or remote-friendly setup, you’ll contribute to a defense-in-depth security program and mentor teammates while improving