Senior Security Engineer, Threat Detection

Klaviyo is looking for a Senior Security Engineer to add to our growing Detection Engineering Team. This is a hands-on technical role that involves solving complex security problems, threat detection, log ingestion and management, security orchestration and automation, and developing new tools to take the Detection & Response Program to the next level. As a Senior Security Engineer you will have the opportunity to provide detection engineering thought leadership, take ownership of end-to-end detection development lifecycle, and execute on core detection and response engineering efforts. 

How you will make a difference:

• Develop, test, and deploy high fidelity signature and anomaly based detections as code
• Conduct TTP-based threat models or attack path analysis to drive detection use cases
• Detect threats leveraging solutions such as  SIEM, data lake, and cloud platforms
• Automate and codify detection and response processes and playbooks
• Design, deploy and maintain extract, transform and load (ETL) data pipelines
• Leverage ETL data pipelines to onboard logging data into data lake and/or SIEM
• Build threat detection systems, tools, integrations and automations 
• Configure and optimize detection and response technologies (e.g., SIEM, EDR, IDS/IPS)
• Conduct ad-hoc threat hunts in support of SecOps, detection, automations or tools
• Collaborate across teams (site, product, engineering, IT) to understand and protect all aspects of Klaviyo cyber footprint 

We’d love to hear from you if you have:

• 6+ years of security experience in the modern cloud environments
• Hands-on experience in detection engineering 
• Hands-on experience with data science / machine learning techniques to identify threats
• Hands-on experience with SIEM and centralized logging (e.g., Splunk, Snowflake)
• Experience with extract, transform and load (ETL) data pipelines 
• Experience with detection-as-code and infrastructure-as-code
• Proficient in programming languages to automate / build (e.g., Python, Go)
• Strong understanding of tactics, techniques, and procedures used by threat actors 
• Experience with threat modeling or attack path analysis to drive detection use cases
• Knowledge of system fundamentals, OS internals, and file systems for Linux and MacOS
• Automation-first approach for all work performed
• Experience securing cloud environments such as AWS, GCP, and/or Azure
• Strong oral and written communication skills
• Team player with a strong, self-managing work ethic