Expert (Staff) Cyber Risk Management Engineer

We are looking for an Expert Cyber Risk Management Engineer to evolve our intelligence driven detection pipeline, incident response program, and purple team initiatives. You'll play a key role in shaping how we detect, respond to, and learn from adversary behaviors across our environments.

As a member of the Cyber Risk Management team, you will be responsible for handling complex security incidents as an Incident Commander, building detections and detection frameworks, collaborating with cross functional peers, and helping to drive our overall security strategy.

Responsibilities:

Incident Command and Response

• Serve as Incident Commander for critical security events as part of the on-call rotation.
• Lead post-mortems and lessons-learned sessions to drive measurable improvements in processes and tooling.
• Analyze security alerts and telemetry (SIEM, EDR, IDS/IPS, logs) to identify and investigate sophisticated threats.

• Fuse internal telemetry with open-source, commercial, and proprietary intelligence to prioritize risk and refine detection strategies.
• Track adversary TTPs and feed insights back into hunting and detection pipelines.

• Proactively identify threats and vulnerabilities across systems and networks using hypothesis-driven threat hunting techniques.
  

• Author and maintain incident response playbooks to ensure consistent incident handling and drive automation where feasible.
• Partner with engineering, IT, and risk/compliance teams to enhance detection coverage and overall incident preparedness.
• Lead tabletop exercises with varied audiences to validate and refine incident response plans, identify weaknesses, and improve communication and collaboration.
• Stay ahead of industry trends and actively contribute to strategic security initiatives.
  

• 7+ years of relevant professional experience with a Bachelor's degree in Computer Science, Information Security, or a related field; an equivalent combination of education and experience will also be considered.
• 7+ years of combined hands-on experience in IT and security architecture development, with broad exposure to infrastructure, networking, and multi-platform environments.
• Deep understanding of operating systems (Windows, Linux, macOS), network protocols, cloud environments (Azure/AWS/GCP), and common attack techniques (MITRE ATT&CK).
• Proficiency with investigation and forensic tools such as EDR platforms (e.g., CrowdStrike, SentinelOne), log aggregators (e.g., Splunk, ELK), and packet capture tools (e.g., Wireshark, Zeek).
• Proven ability to lead high-pressure incident response efforts across both technical and non-technical teams.
• Strong scripting skills in Python, PowerShell, or Bash for automation and analysis; experience with SOAR platforms is highly

• Competitive base and incentive pay
• 401(k) with robust matching and non-matching contributions
• Rich medical & pharmacy benefits
• 100% employer-paid dental and vision benefits
• Holistic wellbeing program with deep financial incentives
• Generous paid time off plus 12 paid holidays and your birthday off
• Culture of growth and learning: career development; tuition reimbursement; recognition program
• Family support: adoption assistance, fertility treatment, child, elder & pet care assistance
• Social responsibility and volunteer opportunities
• Employee discount program