
Security Engineer, Incident Response
Required skills
- Security Incident Response
- Detection and Response Engineering
- large, regulated organization
- Security Operations
- Incident Response services
- complex cross-functional programs
- external threats
- insider threats
- TCP/IP
- networking technologies
Nice to have
- malware analysis
- digital forensics
- intrusion detection
- threat intelligence
- responsible, ethical AI practices
- risk assessment
Role summary
Meta Security is seeking an Incident Response Engineer to lead investigations and responses to internal and external threats. This role involves developing multi-year roadmaps to mature response services through automation and cross-functional partnerships. Responsibilities include conducting security investigations, driving incident resolution, refining operational metrics, and collaborating with engineering teams to build scalable solutions. The ideal candidate will have 8+ years of experience in Security Incident Response and Detection and Response Engineering within a large, regulated organization, with strong knowledge of networking, operating systems, and attacker TTPs. Preferred qualifications include experience in threat intelligence, malware analysis, digital forensics, and leading technical teams.
Responsibilities
- Conduct security investigations and lead security incident response in a cross-functional environment and drive incident resolution
- Develop Incident Response initiatives that improve our functionalities to effectively respond and remediate security incidents
- Refine operational metrics, key performance indicators, and service level objectives to measure Security Operations and Incident Response services
- Influence and align the team’s mission and strategy. Collaboratively prioritize and deliver specific multi-year roadmaps and projects
- Build, cultivate, and maintain successful relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work
- Partner with cross-functional teams to solve challenges related to a broad spectrum of detection and response initiatives
- Collaborate with software and production engineering teams to develop scalable and adaptable Incident Response and Investigative solutions
- Focus on identifying areas of greatest impact for prioritizing, automating and scaling every aspect of our detection and response functionalities
- Coach, mentor, support and care for the team in a way that enables long-term career development, happiness and success at scale
Minimum Qualifications
- Bachelor of Science or Master of Science in Computer Science or related field, or equivalent experience
- 8+ years of work experience in Security Incident Response and Detection and Response Engineering in a large, regulated organization
- In-depth subject-matter knowledge in technical and process regarding Security Operations and Incident Response services
- Experience developing and delivering information on incident and program status for leadership
- Experience leading and managing complex cross-functional programs
- Experience responding to both external and insider threats
- Experience analyzing network and host-based security events
- Knowledge of networking technologies, specifically Transmission Control Protocol (TCP)/Internet Protocol (IP) and the related protocols
- Knowledge of operating systems, file systems, and memory structures on Windows, macOS and Linux
- Coding/scripting experience in one or more general purpose languages
- Experience with attacker tactics, techniques, and procedures
Preferred Qualifications
- Background in malware analysis, digital forensics, intrusion detection, and/or threat intelligence
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
- Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
- Experience in threat hunting including leveraging intelligence data to proactively identify and iteratively investigate suspicious behavior across networks and systems
- Experience recruiting, building, and leading technical teams, including performance management
- Broad knowledge across the Security domain, as well as demonstrated experience in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Detection and/or response tool development
$184,000/year to $257,000/year + bonus + equity + benefits
Similar roles
- Senior Security Engineer, IdentityRamp · New York, NY · Hybrid
- Cybersecurity EngineerPLANET TECHNOLOGIES · Washington, DC · Onsite
- Senior Application Security EngineerPennylane · Remote · Remote
- Senior Security EngineerPathAI · Boston · Hybrid
- Senior Infrastructure Security EngineerFal · San Francisco, CA · Onsite
- BSenior Security EngineerBlue · Santa Clara, CA · Onsite
