Investigate security incidents using digital forensics, data analytics, coding, and threat investigation skills.
Build automation, detection models, and response capabilities to identify anomalous activity and mitigate threats at scale.
Conduct proactive threat hunting across corporate and production environments.
Partner with engineering teams to build advanced detection solutions and improve system and information security.
Identify infrastructure visibility gaps and improve logging and detection with business partners.
Collaborate with Legal, Privacy, Engineering, and other cross-functional teams during complex investigations and large-scale response.
Define and execute threat detection and incident response capabilities and processes while mentoring team members.
Requirements
5+ years of hands-on technical experience in security operations, including investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, and/or detection engineering.
Proficiency in Python or another scripting language, with experience using SQL and Pandas.
Experience automating security detection and response.
Knowledge of the Cyber Kill Chain Framework and MITRE ATT&CK Framework and their application to the threat landscape.
Ability to lead people through complex and ambiguous situations using influence rather than authority.
Ability to work calmly and collaboratively in high-stress situations, along with strong organizational, prioritization, and multitasking skills.
Familiarity with Elasticsearch is preferred.
Experience with AWS services including EC2, S3, Lambda, and RDS is preferred.
Benefits
The role may be eligible for bonus, equity, benefits, and Employee Travel Credits.
Airbnb
Airbnb is an American company operating an online marketplace for short- and long-term homestays and experiences. The company acts as a broker and charges a commission from each booking.