Senior Security Engineer, Threat Detection & Response

at Airbnb
GBP 96,000-120,000 per year
SENIOR
✅ On-site

Tech Stack

AWS @ 4 ElasticSearch @ 3 Mentoring Pandas @ 4 Prioritization @ 7 Python @ 6 SQL @ 4 Security @ 6

Details

The Threat Detection and Response team at Airbnb focuses on automating security detection, responding to security incidents, and building capabilities that support the incident lifecycle. This role will help define and execute the vision for threat detection and incident response capabilities and processes while mentoring other team members.

Responsibilities

  • Investigate security incidents using digital forensics and data analytics.
  • Use coding, data analytics, and investigation skills to hunt, detect, and respond to threats.
  • Build automation and detection models to identify anomalous activity and support response activities at scale.
  • Hunt for threats in corporate and production environments to proactively identify anomalous activity.
  • Work with engineering teams to build advanced detection solutions that protect systems and information.
  • Partner with cross-functional teams on complex investigations.
  • Identify infrastructure gaps and work with business partners to improve visibility through logging and detection.
  • Collaborate with Legal, Privacy, Engineering, and other partner teams to conduct efficient, large-scale responses.
  • Define and execute novel approaches to detecting, containing, and mitigating threats and incidents.
  • Mentor team members and lead people through complex and ambiguous situations using influence rather than authority.

Requirements

  • 5+ years of hands-on technical experience in security operations, including investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, and/or detection engineering.
  • Proficiency in Python or another scripting language.
  • Experience with SQL and Pandas.
  • Familiarity with Elasticsearch is preferred.
  • Experience automating security detection and response.
  • Preferred experience with AWS services, including EC2, S3, Lambda, and RDS.
  • Knowledge of the Cyber Kill Chain and MITRE ATT&CK frameworks and their application to the threat landscape.
  • Ability to work independently with minimal guidance and solve problems creatively.
  • Ability to work calmly and collaboratively in critical, high-stress situations.
  • Strong organizational, prioritization, and multitasking skills.

Benefits

The role may be eligible for bonus, equity, benefits, and Employee Travel Credits. Airbnb is committed to providing reasonable accommodations throughout the recruitment process for applicants with disabilities.

More jobs at Airbnb

Similar jobs