Senior Security Engineer, Incident Response

Details

The Threat Detection and Response team at Airbnb focuses on automating security detection, responding to security incidents, and working with partner teams to build capabilities that support the incident lifecycle. This senior engineer will help define and execute the vision for threat detection and incident response capabilities and processes while mentoring other team members.

Responsibilities

• Perform investigations of security incidents using digital forensics and data analytics.
• Use coding, data analytics, and investigation skills to hunt, detect, and respond to threats.
• Build automation and detection models to identify anomalous activity and support response activities at scale.
• Hunt for threats in corporate and production environments to proactively identify anomalous activity.
• Work with engineering teams to build advanced detection solutions that protect systems and information.
• Partner with other teams to carry out complex investigations.
• Identify infrastructure gaps and work with business partners to improve visibility through logging and detection.
• Collaborate with Legal, Privacy, Engineering, and other cross-functional teams on efficient, large-scale response.
• Define and execute novel approaches to detecting, containing, and mitigating threats and incidents.
• Mentor team members and lead people through complex, ambiguous situations using influence rather than authority.

Requirements

• 5+ years of hands-on technical experience in security operations, including investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, and/or detection engineering.
• Proficiency in Python or another scripting language.
• Experience with SQL and Pandas.
• Familiarity with Elasticsearch is preferred.
• Knowledge of the Cyber Kill Chain Framework and MITRE ATT&CK Framework and their application to the threat landscape.
• Experience automating security detection and response.
• Experience with AWS services, including EC2, S3, Lambda, and RDS, is preferred.
• Ability to work independently with minimal guidance and solve problems creatively.
• Ability to work calmly and collaboratively in critical, high-stress situations.
• Strong organizational, prioritization, and multitasking skills.

Work Location

This position is US remote eligible. The role may include occasional work at an Airbnb office or attendance at offsites, as agreed with the manager. Candidates must live in a state where Airbnb, Inc. has a registered entity.

Compensation

The base pay range is $196,000–$227,000 USD. The role may also be eligible for bonus, equity, benefits, and Employee Travel Credits.