> Markdown version of [/jobs/ext/2562021-security-engineer-i](https://www.wearedevelopers.com/jobs/ext/2562021-security-engineer-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer I - **Company:** IBM - **Location:** United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Extract Transform Load (ETL), Intrusion Detection and Prevention, Python (Programming Language), Open Source Technology, Security Information and Event Management, Data Logging, Multi-Cloud, Kubernetes, Real Time Data, Apache Kafka, Build Process, Software Coding, Stream Processing, Data Pipelines, Security Orchestration, Automation & Response, Confluent, Golang - **Published:** August 22, 2026 - **Apply:** https://www.dice.com/job-detail/7132bbb7-a029-4cc7-9016-2e3550c37383 ## About the Role We're looking for self-motivated team members who crave a challenge and feel energized to roll up their sleeves and help realize Confluent's unlimited potential. Chart your own path and take healthy risks with the backing and support of our #OneTeam culture. Be part of inclusive initiatives like Employee Resource Groups and development programs, and take advantage of benefits that support our diverse global teams. Grow as we grow-whether you're just starting out or managing a large team, you'll be amazed at the magnitude of your impact., Bachelor's Degree Preferred education Master's Degree Required technical and professional expertise * 8+ years of relevant industry experience in detection and response or similar security engineering role in a cloud-first environment. * Deep, expert-level domain knowledge in detection engineering and security incident response. * Experience in instrumenting telemetry and building high-quality detections in large-scale, heterogeneous deployments (e.g., Kubernetes, containers, multi-cloud). * Proficient ability in writing code using Python or Golang to design complex tooling, automation, and data pipelines. * Demonstrated experience with effective incident response and containment practices, preferably in a cloud-first environment. * Experience with operating open-source and/or commercial solutions for logging and security event management (e.g. SIEM, log aggregation, SOAR, etc). * Ability to work alongside a remote team, using a data-driven mindset to propose and own engineering decisions, and the capability to drive consensus across ambiguous, organizational-wide challenges. Preferred technical and professional experience, Being an IBMer means you'll be able to learn and develop yourself and your career, you'll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background. Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on-going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions everyday is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can-do attitude and always striving for an outcome focused approach within everything that they do. Are you ready to be an IBMer?, IBM will not be providing visa sponsorship for this position now or in the future. Therefore, in order to be considered for this position, you must have the ability to work without a need for current or future visa sponsorship. ## Description At Confluent, we're creating a category that transforms how every company manages and streams data. Have you ever found a new favorite series on Netflix, picked up groceries curbside at Walmart, or paid for something using Square? That's Confluent in action-giving our customers instant access to massive amounts of real-time data, enabling them to thrive in an ever-changing digital world. As one of the fastest-growing enterprise companies in history, and with Fortune 100 customers across major industries, we have a tremendous opportunity in front of us. We also have experience on our side. Our leaders have taken companies of our size to major success before and include some of the original creators of Apache Kafka ., We are looking for an experienced security engineer to join our infrastructure security engineering team with a focus on Detection and Response. You will have a unique opportunity to leverage your threat detection and response experience and build some of the foundational systems and services to keep our infrastructure free from malicious actors and threats. As an expert in your domain, you will be identifying high-leverage problems and driving open-ended projects. You will partner closely with engineering teams and compliance analysts to ensure that we maintain sufficient visibility into our environments and develop effective programs and practices to ensure that our environments are always secure. Tooling and automation will be key to success as we scale our environments to meet customer demand. In addition to being a highly productive engineer, you will serve as a technical compass and mentor the next generation of security engineers. We intend to be the world's best, fastest, and most complete stream processing service built by an excellent team, all while having fun - come join us on the journey! What You Will Do * Architect, build and maintain scalable cloud-based security monitoring solutions, across logging pipelines, ETL jobs, and SIEM ingestion. * Drive the long-term roadmap for threat hunting by translating modern adversary tradecraft (TTPs) and threat models into high-signal detection strategies to ensure our critical infrastructure operates safely. * Build processes and workflows to triage security alerts and drive incidents to closure, including participating in a shared on-call rotation for incident response. * Research new threat attack vectors and ensure that our detection and response program is in line with the current threat landscape. * Proactively improve the quality of our detection rules by defining and tracking key metrics (e.g., coverage, precision, MTTD), working directly with engineering teams to eliminate classes of issues. * Collaborate with engineering teams in building logging pipelines needed to gather relevant security telemetry, ensuring new infrastructure ships with secure-by-default visibility. * Contribute to strategy, risk management and prioritization for all efforts around detection and response. * Provide technical guidance, mentorship, and leadership to other engineers, raising the bar for security operations across the organization. ## Related Videos - [Inside Bitpanda's Tech Stack: Scaling a European Fintech Leader - Markus Dorner](https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Let's Get Started With Apache Kafka® for Python Developers](https://www.wearedevelopers.com/videos/565-let-s-get-started-with-apache-kafka-for-python-developers) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [Your next 10x engineer isn't in your city. Refactor accordingly.](https://www.wearedevelopers.com/videos/100103-your-next-10x-engineer-isn-t-in-your-city-refactor-accordingly) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) ## Related Articles - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)