> Markdown version of [/jobs/ext/1977272-senior-security-engineer-incident-response](https://www.wearedevelopers.com/jobs/ext/1977272-senior-security-engineer-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Security Engineer, Incident Response - **Company:** Airbnb - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Amazon Elastic Compute Cloud, Amazon S3, Cyber Security, Digital Forensics, Intrusion Detection and Prevention, Python (Programming Language), SQL Databases, Data Logging, Scripting, Mitre Att&ck, Pandas, Amazon Relational Database Service, Cybercrime, Data Analytics, Functional Programming - **Published:** August 7, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/senior-security-engineer-incident-response-usa-58827738 ## About the Role _ gaps and drive visibility improvements through partner engagement Tasks * 5+ years of hands-on security operations experience (investigations, incident response, forensics, threat hunting, or detection engineering) * Proficiency in Python or another scripting language; familiarity with SQL and Pandas * Knowledge of Cyber Kill Chain and MITRE ATT&CK frameworks * Experience automating security detection and response * Ability to lead in complex, ambiguous situations through influence * Experience with AWS services (EC2, S3, Lambda, RDS) preferred * Ability to work calmly in high-stress situations and collaborate cross-functionally Key requirements * remote work eligibility * bonus possibility * equity * benefits * Employee Travel Credits * paid time off (implied by benefits) ## Description Experteer Overview In this Senior Security Engineer role, you will help shape Airbnb's threat detection and incident response capabilities within the Threat Detection & Response (TDR) team. You will build and optimize security controls, lead investigations, and mentor other engineers, contributing to scalable defense across production and corporate environments. You'll partner with cross-functional teams to reduce risk through detection, containment, and informed remediation. This is a high-impact position at a fast-growing, security-focused team that values proactive problem-solving and collaboration. Compensation / Benefits * Investigate security incidents using digital forensics and data analytics * Develop and deploy automation and detection models to identify and respond to threats at scale * Hunt for threats in corporate and production environments * Collaborate with engineering and cross-functional teams to improve visibility via logging and detection * Identify infrastructure gaps and drive visibility improvements through partner engagement Tasks * 5+ years of hands-on security operations experience (investigations, incident response, forensics, threat hunting, or detection engineering) * Proficiency in Python or another scripting language; familiarity with SQL and Pandas * Knowledge of Cyber Kill Chain and MITRE ATT&CK frameworks * Experience automating security detection and response * Ability to lead in complex, ambiguous situations through influence * Experience with AWS services (EC2, S3, Lambda, RDS) preferred * Ability to work calmly in high-stress situations and collaborate cross-functionally Key requirements * remote work eligibility * bonus possibility * equity * benefits * Employee Travel Credits * paid time off (implied by benefits) ## Related Videos - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [WeAreDevelopers LIVE - CSS is DOOMed](https://www.wearedevelopers.com/videos/1838-wearedevelopers-live-css-is-doomed) - [Advanced Typing in TypeScript](https://www.wearedevelopers.com/videos/496-advanced-typing-in-typescript) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Hate organising your photos? Try it with 5 Terabytes](https://www.wearedevelopers.com/videos/79-hate-organising-your-photos-try-it-with-5-terabytes) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)