Detection and Response Engineer

Vaga não está no LinkedIn

🕒 Outubro 14

🏄 California – Remoto

🏄 California – Remote

💵 $124.000 - $229.400 / ano

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

👷🏻‍♀️ Engenheiro

👻 Score fantasma 2%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

XBOX

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 2001

🎮 Jogos

🔧 Hardware

👥 B2C

Gaming • Hardware • B2C

A XBOX é a marca e plataforma de jogos de consumo da Microsoft. Ela projeta e vende consoles de videogame (Xbox Series X e Series S), jogos e acessórios de primeira e terceira partes, e opera serviços digitais como a Microsoft Store para jogos, assinatura do Xbox Game Pass e Xbox Cloud Gaming. O Xbox também oferece acesso a jogos para PC e dispositivos móveis, serviços de comunidade e suporte, e integra-se com contas Microsoft e outros produtos Microsoft.

Descrição

• Detect, investigate, and respond to security incidents across cloud, corporate, and production environments as a hands-on TDIR team member • Monitor and analyze security telemetry and audit logs to identify anomalous activity, unauthorized access, emerging threats, targeted attacks, and advanced adversaries • Perform alert triage, in-depth investigation, and forensic analysis through containment, remediation, and post-incident review • Execute endpoint, identity, cloud, and malware investigations, including timeline reconstruction, indicator extraction, and root cause analysis • Develop, refine, and tune SIEM threat detections based on attacker behavior and investigation findings • Improve investigation and response efficiency through automation, SOAR workflows, scripting, and advanced analytics • Design, build, or operate AI/LLM-assisted triage and enrichment workflows • Evaluate and harden AI-assisted security tooling against adversarial input, including prompt injection and verdict-poisoning risks • Contribute to TDIR procedures, playbooks, runbooks, documentation, and operational metrics • Collaborate with engineering teams, business stakeholders, and vendors during investigations and response efforts • Participate in an on-call rotation and provide off-hours support for critical incidents and material security events • Communicate investigation findings to technical teams and leadership • Travel occasionally, up to approximately 10%, to support studios or on-site incident response

🎯 Requisitos

• Bachelor’s degree in computer science, Information Security, or equivalent practical experience • 10+ years of progressively accountable security experience • Hands-on experience in threat detection, security operations, and incident response across the full incident lifecycle • Strong understanding of the modern threat landscape, attacker tactics, techniques, and procedures • Proven ability to detect, triage, investigate, and respond to security incidents in enterprise environments • Experience with detailed log analysis, correlation, and investigative triage • Strong written and verbal communication skills • Ability to work independently and collaboratively with technical and business stakeholders • Willingness to participate in an on-call rotation and provide off-hours support • Hands-on experience with SIEM and EDR platforms, including building or significantly extending detection content • Scripting or programming experience such as Python, PowerShell, or KQL • Strong host- and network-based forensic skills, including timeline reconstruction and root cause analysis • Working knowledge of LLM applications in security operations and related failure modes • Fluency in English • Preferred: 12+ years of relevant IT and security experience, leadership or mentorship experience, malware analysis, SOAR, AI-assisted triage, identity-focused detection, security hardening, leadership/vendor interfacing, and cybersecurity community engagement

🏖️ Benefícios

• Medical, dental, vision, health savings account or health reimbursement account, healthcare spending accounts, dependent care spending accounts, life and AD&D insurance, disability insurance • 401(k) with Company match • Tuition reimbursement • Charitable donation matching • Paid holidays and vacation • Paid sick time • Floating holidays • Compassion and bereavement leaves • Parental leave • Mental health & wellbeing programs • Fitness programs • Free and discounted games • Voluntary benefit programs including supplemental life & disability, legal service, ID protection, and rental insurance • Relocation assistance may be available if the Company requires geographic relocation • Incentive compensation may be available; not guaranteed

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo