Senior Staff Security Engineer, Detection & Response

Your day-to-day:

• Responsible for building and expanding detection capabilities across a variety of platforms
• Responsible for security event monitoring, management and response, workflows and tasks
• Improve security monitoring and operational tasks by developing measurement capabilities and metrics to track and communicate performance, coverage and risk
• Evaluate existing SIEM rules, filters, events and use cases and adapt them to meet the business requirements
• Mature security operations; drive integration of new log sources, tools and services
• Create, maintain and manage a library of automated playbooks for security tasks and workflows
• Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives
• Assist the Security Incident Response Program with related matters resulting from security investigations
• Participate in key security initiatives as the Subject Matter Expert to ensure alignment with strategies and roadmap
• Develop standard operating procedures and other appropriate documentation to enforce quality and consistency of services being delivered
• Support ongoing security compliance, audit, and certification programs (e.g., PCI, HIPAA, SOC2)

What you’ll bring to the team:

• Bachelor's degree in Information Security, Computer Science, Computer Engineering, or equivalent work experience
• Minimum 10 years of consistent detection & response experience performing triage/incident response in enterprise SaaS environments
• Expert knowledge of the cyber threat landscape – able to articulate and incorporate into program understanding of major threat categories, motivations, and intent of adversaries against enterprise assets
• Experience in at least one programming language, Python, Go, C, C++ and with an automation platform
• Experienced in driving monitoring and automation in cloud environments, preferably including knowledge of AWS and Azure native capabilities
• Strong understanding of advanced persistent threats, attacker methodologies, attack lifecycle, cyber kill chain, and the MITRE framework
• Exceptional collaboration skills and communication skills, with the ability to engage with partners and stakeholders with a variety of perspectives and technical understanding
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration skills.
• Ability to work independently and as part of a team.
• On-call availability is required.

Nice to have:

• GIAC security certification such as GCIA, GCIH, GREM, GPEN (or equivalent), multiple preferred
• SaaS / FinTech / anti-fraud experience a plus
• Automation first mindset

Work perks at Greenlight:

• Medical, dental, vision, and HSA match 
• Paid life insurance, AD&D, and disability benefits 
• Traditional 401k with company match and Roth IRA
• Unlimited PTO 
• Paid company holidays and pop-up bonus holidays 
• Wellness & professional development stipends
• Mental health resources  
• 1:1 financial planners
• Fertility healthcare
• 100% paid parental and caregiving leave, plus cleaning service and meals during your leave
• Flexible WFH, both remote and in-office opportunities
• Fully stocked kitchen, catered lunches, and occasional in-office happy hours
• Employee resource groups