Senior Security Engineer, Incident Response

Airbnb
San Francisco, CA, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours

Tech stack

Amazon Web Services Amazon Elastic Compute Cloud Amazon S3 Build Automation Cyber Security Digital Forensics Elasticsearch Intrusion Detection and Prevention Python (Programming Language) SQL Databases Data Logging Scripting
+6 more
Mitre Att&ck Pandas Amazon Relational Database Service Cybercrime Data Analytics Functional Programming

Job description

Experteer Overview As a Senior Engineer on Airbnb’s Threat Detection & Response team, you’ll help define and execute threat detection and incident response capabilities that protect the company at scale. You’ll investigate security incidents, hunt for threats, and build automation to detect and contain malicious activity across production and corporate environments. You will collaborate with cross-functional partners to improve security through data-driven learnings and root-cause analysis. This role offers impact in shaping security posture and incident response at a global, fast-growing platform. Compensation / Benefits * Investigate security incidents using digital forensics and data analytics * Hunt, detect, and respond to threats in production and corporate environments * Develop automation and detection models to identify anomalous activity * Collaborate with engineering to build advanced detection solutions * Identify gaps in infrastructure and improve visibility through logging and detection * Work with Legal, Privacy, and Engineering for large-scale incident response * Lead and influence teams in complex, ambiguous situations * Mentor others on threat detection and incident response practices Tasks * 5+ years in security operations including investigations, incident response, forensics, threat intelligence, threat hunting, and/or detection engineering * Proficiency in Python or another scripting language; SQL and Pandas commonly used * Familiarity with Elasticsearch (preferred) * Self-motivated, creative problem-solver; able to work independently * Ability to lead people through influence in complex situations * Calm, collaborative under high-stress conditions * Strong organizational, prioritization, and multitasking skills * Knowledge of Cyber Kill Chain and MITRE ATT&CK frameworks * Experience automating security detection and response * Experience with AWS services (EC2, S3, Lambda, RDS) preferred Key requirements * bonus * equity * benefits * Employee Travel Credits

Requirements

and and detection * Work with Legal, Privacy, and Engineering for large-scale incident response * Lead and influence teams in complex, ambiguous situations * Mentor others on threat detection and incident response practices Tasks * 5+ years in security operations including investigations, incident response, forensics, threat intelligence, threat hunting, and/or detection engineering * Proficiency in Python or another scripting language; SQL and Pandas commonly used * Familiarity with Elasticsearch (preferred) * Self-motivated, creative problem-solver; able to work independently * Ability to lead people through influence in complex situations * Calm, collaborative under high-stress conditions * Strong organizational, prioritization, and multitasking skills * Knowledge of Cyber Kill Chain and MITRE ATT&CK frameworks * Experience automating security detection and response * Experience with AWS services (EC2, S3, Lambda, RDS) preferred Key requirements * bonus * equity * benefits * aaaa aaP_ Travel Credits

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:03 min

Accelerating pandas dataframes using cudf module plugins

Ankit Patel Ankit Patel · WWC 2024

3:43 min

The enduring legacy of the amazon S3 storage API

Chris Heilmann +3 · LIVE

1:04 min

Introduction to Bitcoin script parsing tools

Steve Shadders · LIVE

3:53 min

Applying software development methodologies to incident response

Tobias Dunn-Krahn · LIVE

6:58 min

Analyzing production code coverage data using pandas

Markus Harrer Markus Harrer · WWC 2021

6:03 min

Engaging software developers deeply in secure engineering practices

Tanya Janca · WWC 2021

Videos

See all

Related articles

See all