Partner 20, Senior Incident Response Engineer

📋 Description

• Run incidents end-to-end across cloud and SaaS.
• Write detections with MITRE ATT&CK coverage.
• Shape the SOC with AI agent integration into triage.
• Partner across Legal, Compliance, IT during incidents.
• In-office presence 2 days/week in San Francisco.

🎯 Requirements

• 5+ years incident response across AWS and GCP.
• Experience leading live incidents end-to-end.
• Proactive threat hunts using current TTPs.
• Detection authoring in SIEM platforms (Sigma, KQL).
• Strong Python scripting; automation mindset.
• GCIH or equivalent IR certification preferred.

🎁 Benefits

• Carry program participation and discretionary bonus.
• Health, dental, vision, disability, life insurance.
• 401K plan and vacation/sick leave.