Sr. Incident Response Engineer

Summary: As a Senior Incident Response Engineer, you will work with a team of highly capable engineers with various degrees of experience in a newly formed IR practice. The team lives the mantra of “We don’t make insecure impossible, we make secure irresistible” as they manage IR duties and engineering in a remote first, cloud native company. The engineer conducts full-cycle incident response activities-such as alert triage, investigation, containment, remediation, and reporting-while ensuring sensitive cases are managed with proper approvals and confidentiality. Additionally, the position requires strong technical and communication skills, supports process improvements and documentation, and focuses on automating routine investigations to enhance the organization’s security posture and enable more impactful responses.

• To excel in this role, you should have
• At least 8 years in security with 3 of those in incident response
• Experience running incidents from a security responder point of view
• Excellent communication skills
• An eagerness to partner with other teams and an understanding that security means the proper application of friction, not just speed bumps and blockers.
• Excellent mentoring and teaching skills and an overall eagerness to help guide more jr engineers into more senior roles.
• You should be a cooler in tense situations regarding incidents, level of risk acceptance, and how to manage work during these situations in order to provide investigatory support to the organization.
• Experience using a logging platform like LogScale, ELK or Splunk
• Experience with cloud security in AWS, GCP, Azure or Oracle Cloud.
• Deep experience in EDR or XDR and tools like Crowdstrike, CarbonBlack, SentinleOne etc
• Experience with container security, meaning you have created, understand the process and know what to do, where to look, how processes inside a container are viewed from the OS/Host level., * Network Fundamentals
• Windows OS Internals
• Mac OS Internals
• Data Leakage Prevention - Classification to Containment to Remediation
• 7 years in the security field with 3 of those years in Incident Response
• Strong writing skills and communication skills.
• Demonstrated ability to think strategically and make effective and timely decisions.

Technology and Systems:

• AWS, GCP, and Azure cloud infrastructure
• Docker, Kubernetes
• Logscale, Elastic, Tines or another Automation tool
• Zscaler, Palo Alto Networks
• Programming / Scripting
• Python, Bash, Shell Script

Preferred Skills:

• Experience with cloud security incident response in AWS or similar environments.
• Familiarity with threat intelligence platforms and external threat feeds.
• Experience supporting investigations involving data exfiltration or insider risk.
• Exposure to security automation, alert enrichment, or response orchestration tools.
• Knowledge of email security platforms and phishing response workflows.

Physical Role Requirements : Be seated at a computer intermittently for up to eight hours a day. Move up to 10 pounds occasionally, by lifting, carrying, pushing, pulling, or otherwise repositioning objects. Sitting for long periods of time while using office equipment such as computers and phones. Repetitive motions using hands and digits, such as movement of wrists, hands and fingers while picking, pinching and typing during your normal working environment.

Minimum Education, Licensure and Professional Certification requirements: Bachelor’s degree required in computer science,cybersecurity, IT or related field

Minimum Experience required : 7+ years of experience required in Security Operations, Incident Response, or Security Engineering roles.

This role pays between $ 133k to $ 155k , and your actual base pay will depend on your skills, qualifications, responsibilities, experience, and location.

At Frontdoor certain roles are eligible for additional rewards and incentives. Speak directly to your recruiter to learn more.

Our approach to benefits is holistic, and includes health, wellbeing and financial components including: insurance for medical/pharmacy, dental, vision, life, and disability, weight loss and smoking cessation programs, matching 401(k) and ability to participate in our employee stock purchase plan.