Senior Security Engineer, Detection and Response at Compass in Seattle, WA

What you will do:

• Build integrations for our security telemetry and event monitoring platform to develop mechanisms to detect and respond to known attacker methodology
• Develop high fidelity alerts and signals that is implemented codified with detection as code
• Deploy monitoring and threat simulation testing for security controls to validate efficacy improving on established frameworks (Atomic Red Teaming, MITRE, DeTT&CT )
• Conduct threat hunting exercises and analyze data sets to create new active defense capabilities
• Identify opportunities for automating and codifying internal response processes
• Drive security data analytics and automation for detection and response scale
• Partner with additional information security teams to scale operational capabilities and provide preventative control feedback to relevant stakeholders
• Establish telemetry across the compass platform and technologies to support attributable event correlations
• Participate in security event and incident response efforts

Who you are:

• You are empathetic and accountable while helping contribute to improve the security program and our customers trust
• Able to communicate about security vulnerabilities and remediation techniques in an accessible way to a variety of audiences
• You take an automation-first approach to everything you do. You understand the challenges of scale for security and leverage automation whenever possible
• You are familiar with scripting and programing languages; Python, Ruby, Go
• Enjoy the challenge of the investigation to identify root cause and drive impactful responses
• Knowledge and understanding of detection and incident response disciplines; current threats, modern attacker exploits and persistence techniques
• Experience working with multiple departments and functions leading an Incident Response
• Ability to analyze and correlate across large and diverse datasets to provide relevant data points and remediation actions
• Demonstrate strong understanding in a few of the following areas: Web Application Security, Cloud Infrastructure, Network Security, Operating system security, Identity and Access Management