Staff Security Engineer

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $134k - $184.2k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Guardant Health

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

🏥 Healthcare

💼 Consulting

🍽️ Food & Beverage

Healthcare • Consulting • Food & Beverage

Guardant Health is a precision oncology company that specializes in using blood tests to revolutionize cancer care. Their innovative tests provide critical insights that help inform treatment decisions for patients across all stages of cancer. By leveraging advanced technology and data, Guardant Health aims to improve clinical outcomes and enhance the overall patient experience in the fight against cancer.

📋 Description

• Develop and maintain high-fidelity threat detection content across infrastructure, endpoint, cloud, SaaS, and identity platforms • Own and enhance detection engineering workflows, including testing, tuning, false-positive reduction, and coverage analysis • Partner with the external MDR provider to develop and refine detection rules, improve investigation quality, and establish escalation and response workflows • Support and participate in incident response, including investigation, containment, eradication, and post-incident reviews • Build dashboards, metrics, and reports to measure detection coverage, SOC effectiveness, and security posture • Monitor and help secure AWS and cloud-native environments, including CloudTrail, VPC Flow Logs, workload logs, and SaaS integrations • Evaluate and implement AI-assisted security capabilities for defense and detection • Define how AI systems, agents, and usage are logged, monitored, and assessed for risk • Develop documentation, runbooks, and operational playbooks for SOC and security engineering workflows • Mentor junior engineers and provide technical leadership within SOC and security engineering functions • Stay current on emerging threats, detection techniques, attacker tradecraft, and security data engineering best practices

🎯 Requirements

• 8+ years of experience in security engineering, security operations, detection engineering, or incident response • Strong hands-on experience developing, testing, and tuning SIEM and EDR detections across multiple environments • Strong background in threat detection and incident response within a SOC environment • Experience owning open source threat intelligence platforms such as MISP, Yeti, and OpenCTI • Demonstrated ability to improve alert quality, reduce false positives, and incorporate business context into detection and response decisions • Experience working with external MDR providers, managed SOCs, or SIEM service partners • Strong incident response experience, including leading technical investigations and coordinating containment, eradication, and recovery activities • Hands-on experience with EDR platforms • Experience working with identity and access logs • Experience investigating threats in AWS environments and working with cloud security telemetry • Understanding of AI and machine-learning use cases in security, including detection, automation, and governance considerations • Strong written and verbal communication skills, including ability to write threat intelligence assessments and reports • Ability to work independently and collaboratively in a fast-paced environment • Experience with detection engineering frameworks such as Diamond Model and MITRE ATT&CK • Experience in healthcare, biotech, or other regulated environments • Security certifications such as CISSP, GIAC, GCED, GCIA, or cloud security certifications • Curiosity, sound judgment, and ability to critically evaluate and responsibly leverage AI-enabled tools in accordance with company policies, ethical standards, and regulatory requirements • Background screening including criminal history is required

🏖️ Benefits

• Hybrid work model for eligible onsite employees • Work-from-home days for individual-focused time • Reasonable accommodations for candidates with disabilities, long-term conditions, mental health conditions, or sincerely held religious beliefs