Security Engineer, Incident Response

1 мес. назад

USAMiddle

threat huntingvulnerabilitiessecurity operationsautomation

Security Engineer focused on incident response, threat hunting, and improving security detections and automations.

Обязанности

 
continues to grow and deliver the connected fitness platform of the future to help our members be the best version of themselves. As a technology-enabled business, our approach to security operations must evolve and grow alongside our services and members.  We are looking for a Security Engineer   with a diverse set of skills that can thrive in a challenging, fast-paced, and rewarding environment. We do not have a traditional SOC tier structure, so you can expect to help us improve our detections as well as create additional detections, build automations, and research & help define the solutions roadmap to achieve scale. The right candidate should have a strong focus on results, be self-driven, and be excited by working on a diverse set of problems, threats, and alert

Требования

 
Minimum 3 years in Information Security
Experience in incident response or threat detection  required; we value in-depth knowledge of cloud environments (AWS, GCP, Azure, Kubernetes), SaaS platforms (O365, Google Workspace), or IAM
Strong knowledge of Incident Response principles and processes
Experience with Automation specifically for Alert Intake/Triage/Incident Handling
Expert experience with SIEM tools or data lakes
Experience with dissecting attacker methodologies and techniques and/or EDR tooling
Excellent analytical and problem solving skills
Comfortable using AI coding tools as a primary development accelerator to build and ship homegrown security solutions
A learning mindset and excitement for learning new technologies or security areas
Relevant certifications: GCIH, GCFE, GCIA, GCFA, AWS Security Specialty
#LI-DD1 #LI-Hybrid
The base salary range represents the low and high end of the anticipated salary range for this position based at our New York City headquarters. The actual base salary offered for this position will depend on numerous factors including, without limitation, experience and business objectives and if the location for the job changes. Our base salary is just one component of ’s competitive total rewards strategy that also includes annual equity awards and an Employee Stock Purchase Plan as well as other region-specific health and welfare benefits.
As an organization, one of our top priorities is to maintain the health and wellbeing for our employees and their family. To achieve this goal, we offer robust and comprehensive benefits including:
Medical, dental and vision insurance 
Generous paid time off policy
Short-term and long-term disability
Access to mental health services
401k, tuition reimbursement and student loan paydown plans
Employee Stock Purchase Plan
Fertility and adoption support and up to 18 weeks of paid parental leave 
Child care and family care discounts
Free access to Digital App and apparel and product discounts
Commuter benefits and Citi Bike Discount
Pet insurance and so much more!

Другое

 
 
Directly support ’s Security Program while conducting in-depth research and strategic analysis of intelligence data from various sources to leverage in threat hunting
Stay up to date with relevant vulnerabilities, threat actors, indicators of compromise (IOCs) tactics, techniques, and procedures (TTPs), and trends, identifying actionable areas of interest and threats
Provide intel-driven insights into existing and emerging threats, use insights to search enterprise for activity that is anomalous and/or malicious 
Work with Security Engineering and the Security Operations Center to baseline user behaviors and events as well as build out new detections and response workflows
Provide triage support for incident response and investigation efforts as part of ’s Security and Operations team and other internal teams
Recommend and build countermeasures based on threat analysis, intelligence, and forecasting
Develop, implement, and maintain security incident playbooks/runbooks
Prepare and present analysis with findings and recommendations in the form of briefings, reports, and dashboards to managers, various team leads and senior leadership as required
Identify repetitive, high-volume SOC workflows and systematically eliminate them through AI-powered triage pipelines, LLM-assisted investigation, and end-to-end automation
Design and ship homegrown security tooling where commercial solutions fall short, owning the full lifecycle from requirements through iteration — leveraging AI-assisted development to move fast and maintain high quality
Translate threat intelligence and incident learnings into prioritized, actionable control recommendations that reduce risk without slowing the business
Things to consider: We’re a high-growth company, and our processes are in various states of maturity
We’re doing a lot really fast - you may be asked to flex outside of your role from time to time. On the other hand, we believe in appropriate work/life balance, and you’ll be asked regularly to gauge your capacity against new efforts to prevent overloading
 
(NASDAQ: PTON) provides Members with expert instruction, and world class content to create impactful and entertaining workout experiences for anyone, anywhere and at any stage in their fitness journey. At home, outdoors, traveling, or at the gym, brings together innovative hardware, distinctive software, and exclusive content. Founded in 2012 and headquartered in New York City, has millions of Members across the US, UK, Canada, Germany, Australia, and Austria. For more information, visit
is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. Equal employment opportunity has been, and will continue to be, a fundamental principle at , where all team members, applicants, and other covered persons are considered on the basis of their personal capabilities and qualifications without discrimination because of race, color, religion, sex, age, national origin, disability, pregnancy, genetic information, military or veteran status, sexual orientation, gender identity or expression, marital and civil partnership/union status, alienage or citizenship status, creed, genetic predisposition or carrier status, unemployment status, familial status, domestic violence, sexual violence or stalking victim stat
Please be aware that fictitious job openings, consulting engagements, solicitations, or employment offers may be circulated on the Internet in an attempt to obtain privileged information, or to induce you to pay a fee for services related to recruitment or training. does NOT charge any application, processing, or training fee at any stage of the recruitment or hiring process. All genuine job openings will be posted here on our careers page and all communications from the recruiting team and/or hiring managers will be from an @ email address. 
If you have any doubts about the authenticity of an email, letter or telephone communication purportedly from, for, or on behalf of , please email applicantaccommodations@ before taking any further action in relation to the correspondence.
does not accept unsolicited agency resumes. Agencies should not forward resumes to our jobs alias, employees or any other organization location. is not responsible for any agency fees related to unsolicited resumes.