Senior Security Engineer, Incident Response

Experteer Overview In this Senior Security Engineer role, you will help shape Airbnb’s threat detection and incident response capabilities within the Threat Detection & Response (TDR) team. You will build and optimize security controls, lead investigations, and mentor other engineers, contributing to scalable defense across production and corporate environments. You’ll partner with cross-functional teams to reduce risk through detection, containment, and informed remediation. This is a high-impact position at a fast-growing, security-focused team that values proactive problem-solving and collaboration. Compensation / Benefits * Investigate security incidents using digital forensics and data analytics * Develop and deploy automation and detection models to identify and respond to threats at scale * Hunt for threats in corporate and production environments * Collaborate with engineering and cross-functional teams to improve visibility via logging and detection * Identify infrastructure gaps and drive visibility improvements through partner engagement Tasks * 5+ years of hands-on security operations experience (investigations, incident response, forensics, threat hunting, or detection engineering) * Proficiency in Python or another scripting language; familiarity with SQL and Pandas * Knowledge of Cyber Kill Chain and MITRE ATT&CK frameworks * Experience automating security detection and response * Ability to lead in complex, ambiguous situations through influence * Experience with AWS services (EC2, S3, Lambda, RDS) preferred * Ability to work calmly in high-stress situations and collaborate cross-functionally Key requirements * remote work eligibility * bonus possibility * equity * benefits * Employee Travel Credits * paid time off (implied by benefits)

_ gaps and drive visibility improvements through partner engagement Tasks * 5+ years of hands-on security operations experience (investigations, incident response, forensics, threat hunting, or detection engineering) * Proficiency in Python or another scripting language; familiarity with SQL and Pandas * Knowledge of Cyber Kill Chain and MITRE ATT&CK frameworks * Experience automating security detection and response * Ability to lead in complex, ambiguous situations through influence * Experience with AWS services (EC2, S3, Lambda, RDS) preferred * Ability to work calmly in high-stress situations and collaborate cross-functionally Key requirements * remote work eligibility * bonus possibility * equity * benefits * Employee Travel Credits * paid time off (implied by benefits)