Senior Security Engineer, Detection & Response
New
A
AngiHome services
Remote - United States, eastern or central time zonesFull-TimeSenior
SalaryThe base salary band for this position ranges from $150,000 - $225,000, commensurate with experience and performance. This position will be eligible for a competitive year end performance bonus & equity package.
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of experience working on a security team supporting product/engineering functions, cloud infrastructure, and corporate infrastructure development
- Required Skills
- AWSPythonKubernetesTerraformCloudFormation
Requirements
- Have 5+ years of experience on a security team supporting product/engineering functions, cloud infrastructure, and corporate infrastructure development.
- Have software engineering experience; Python is preferred.
- Build reliable, maintainable security infrastructure using CI/CD software engineering practices.
- Have hands-on AWS and infrastructure-as-code experience, such as Terraform or CloudFormation.
- Have working knowledge of EDR, SIEM, and SOAR platforms and their APIs.
- Have hands-on experience with containers and Kubernetes, including detection and forensics.
- Have experience owning incidents end to end, from page and diagnosis through fix and postmortem.
- Have some exposure to LLM or agentic system security, including prompt injection, agent identity, or AI-system data exfiltration.
- Use AI-assisted coding or security tools fluently and be able to explain how you direct and verify their output.
- Write detection documentation, postmortems, and design feedback for other engineers.
- Comfort executing the technical side of a compliance framework such as PCI or SOX is preferred.
Responsibilities
- Build and own detections across AWS, EDR, identity, SaaS, and the AI gateway.
- Own the security log pipeline and make audit and security logs available to teams for triage, analysis, and incident response.
- Develop detection for account takeover, credential stuffing, and abuse against the marketplace.
- Build triage automation for enrichment, correlation, containment, and evidence capture, with verification for automated outputs.
- Extend detection coverage to agentic AI products, including prompt injection, tool-call abuse, and data exfiltration.
- Participate in the incident response lifecycle and a 24/7 on-call rotation.
- Maintain detection-related technical controls for compliance frameworks such as PCI DSS.
- Partner with platform and product teams to design telemetry, threat models, and response playbooks for new services.
View Full Description & ApplyYou'll be redirected to the employer's site
