Security Engineer I

Chewy is seeking a Security Engineer I to join our team in Plantation FL, or Boston MA. Our mission is to be the most trusted and convenient destination for pet parents and partners, and our Information Security team plays a critical role in supporting that vision by protecting the confidentiality, integrity, and availability of our data. In this role you will be responsible for collaborating in a team environment on detection engineering, incident response, SIEM and SOAR development along with a strong emphasis on scripting (Python) and working with APIs to enhance threat detection capabilities.

What You’ll Do:

• Triage alerts from various security systems to identify potential security incidents.
• Assist in the development and tuning of SIEM rules.
• Support the design, implementation and maintenance of SOAR playbooks.
• Integrate basic functionality from APIs into SOAR playbooks using Python.
• Improve SOAR playbooks based on post-incident tasks.
• Participate in an on-call rotation.

• Bachelor’s degree or higher in Computer Science, Computer Information Systems, or similar; or equivalent experience
• Basic understanding of TCP/IP fundamentals
• Experience configuring and deploying endpoint detection and response, firewalls, web application firewalls, intrusion detection/prevention systems
• Solid understanding of the MITRE ATT&CK framework
• Basic proficiency in Python
• Excellent analytical and problem-solving skills, with the ability to identify, mitigate and communicate effectively
• Basic knowledge of public cloud technologies
• Ability to balance multiple priorities at a given time
• Must be team oriented and have a customer first mindset

Bonus (if applicable):

• Experience working with RESTful APIs for authentication, data retrieval, parsing JSON/XML etc.
• Functional understanding of DNS, HTTP and other high level protocols
• Understanding of Git and GitOps concepts.
• Experience working in a fast paced e-commerce environment.
• Experience investigating security incidents in public clouds (AWS, Google.)