Senior Security Engineer - Digital Forensics & Incident Response

About the Role

Join our dynamic team as a Senior Security Engineer specializing in Digital Forensics and Incident Response (DFIR) to help shape the future of our security capabilities.

Responsibilities

• Lead and coordinate security incident response across cloud, endpoint, and SaaS environments.
• Conduct deep forensic analysis to determine scope, impact, and root cause of security incidents.
• Partner with engineering teams to implement durable security improvements based on incident lessons learned.
• Develop and maintain DFIR tooling, workflows, and automation to enhance investigation speed and consistency.
• Create and update incident response documentation, playbooks, and forensic procedures.
• Proactively conduct threat-hunting exercises to identify and mitigate potential threats.
• Mentor junior team members and share knowledge to elevate the team's DFIR capabilities.
• Participate in the on-call roster for security incident response.
• Stay current on emerging threat techniques and DFIR technologies.

Requirements

• Proven experience leading and coordinating complex security incident investigations in cloud-native environments.
• Expertise in performing technical investigations and forensic analysis across endpoints, cloud infrastructure, and SaaS platforms.
• Experience in building and improving security tooling, automation, and response workflows.
• Strong understanding of systems thinking and feedback loops for long-term security improvements.
• Excellent communication skills, with the ability to remain calm and clear under pressure.
• Experience working effectively with cross-functional partners during incidents.
• Demonstrated empathy, humility, and generosity in a team setting.

Nice-to-Haves

• Experience with threat intelligence platforms and analysis.
• Familiarity with SIEM and EDR solutions.
• Knowledge of scripting languages for automation (e.g., Python, PowerShell).