Senior Detection Engineer, 23andMe
$150-224k
2+ days a week in office (Sunnyvale, CA)
Genetic testing and DNA analysis
Posted today
Genetic testing and DNA analysis
501-1000 employees
Posted today
$150-224k
2+ days a week in office (Sunnyvale, CA)
501-1000 employees
Company mission
To help people access, understand, and benefit from the human genome.
Role
Who you are
- You will bring critical thinking skills, hands-on experience with Enterprise Security design and the ability to work with and influence cross-functional teams (Engineering, IT, NetOps and Architecture)
- Passion for security!
- Familiarity with how attacks are conducted against network infrastructure, web applications and employees
- Hands-on experience with SIEM, EDR, osquery/FleetDM, and other security tools, with the ability to triage alerts effectively to identify potential threats
- Some knowledge and capability with one or more scripting and programming languages (e.g., bash, Go, Python, etc.)
- Working knowledge of operating systems (e.g., MacOS, Windows, Linux)
- Hands-on experience with information security tools in Google Workspace, Cloudflare, Okta, and AWS
- Strong understanding of security concepts such as incident response, cloud security monitoring, network security monitoring, host based analysis, MITRE ATT&CK, Cyber Kill Chain, CIA triad, and Zero Trust
- Sound familiarity with AWS security concepts
- Ability to communicate well and work with others
- Ability to think critically about challenging problems to determine the most effective method to solve and address
- A minimum of 3 years of experience with managing large scale enterprise security infrastructure including security solution design and hands-on engineering
- B.S./M.S. in computer science, engineering, information systems, IT, Information Security, or a related technical field
What the job involves
- 23andMe is looking for an experienced detection engineer to join our Security Operations Team
- You’ll be leveraging your experience and expertise with enterprise security tools and industry best practices to secure our customer data and corporate assets
- We are focused on proactive security and are looking for hands-on security engineers who are passionate about building and defending our company’s assets
- Work within the Security Operations Team to identify threats within the environment through traditional threat hunting techniques
- Work collaboratively to speed up response time and to determine the state of the potential threat / alert
- Assist the security organization to identify automation opportunities and work to implement those integrations and automation improvements within the security tooling
- Participate in an on-call rotation with additional bonus opportunities
- Leverage multiple security techniques and tools daily, including but not limited to use of tools for: intrusion detection, endpoint detection and response, and SIEM
- Actively threat hunt within security tools and determine steps to triage and filter the true events from background noise
- Create and use threat hunting playbooks
- Create and use security operations runbooks to respond to alerts
- Design and implement new security playbooks and automation
- Define, design, and build threat detection methodologies; help to improve the security posture of the company
- Lead by example and share your creativity, wit and experience across the team, working on a variety of tasks ranging from threat detection within multiple enterprise security tools, assessing threats and providing targeted responses and monitoring the corporate environment for potential risks
- Integrate, configure and maintain SIEM tools
- Train and mentor security engineers and analysts to utilize SIEM technology
- Manage and improve our incident response workflow, implement mitigation plans in cooperation with Engineering, SecOps, AppSec, and IT teams
- Help teams to leverage the existing and emerging logging and monitoring solutions, extract security events from the logs with filter/correlation tools, evaluate misconfiguration and intrusion detection signals, automate as much as possible
- Improve our vulnerability management program: setup and integrate security scans, triage and mitigate vulnerabilities, communicate required actions to relevant teams
- Implement, monitor and support Product, corporate IT and infrastructure security solutions, including:
- Configure, manage and optimize logging, monitoring, correlation and alerting tools, and the orchestration through a security information and event management (SIEM) solution
- Data Loss Prevention (DLP) solution focusing on PII and Intellectual Property related data
- Detect and respond: Deploy Threat Intelligence products and develop threat reports
- Assist with the design, development, delivery, documentation, training, and reporting on security control mechanisms (e.g. WAF, endpoint-protection/AV/EDR, etc.)
- Evaluate security technologies; work closely with vendors to ensure timely delivery of products, services, and feature requests
- Risk and evidence-based approach: Identify, assess, and prioritize security risks to Product, Infrastructure, Enterprise data and systems, including external threats, internal threats, and exposure to third-party vulnerabilities
- Other duties as assigned
Our take
23andMe offers its customers a vision into their ancestry and health through genetic testing carried out via kits sent through the mail. Results can show users their risk of more than 50 health conditions thanks to a tube of saliva at one end and a lot of technology at the other.
This access to genetic insight has helped the company sell more than 15 million test kits in the last 15 years. This remains the core component of the business. Access to millions of customers DNA however has given the company a vast collection of genetic material, allowing 23andMe to expanded into the drug development space where it is collaborating with pharmaceutical giant GlaxoSmithKline.
23andMe is not without competition, with other big names including Ancestry and MyHeritage. However, with a valuation of $3.5 billion, it remains one of the largest, with pockets deep enough to pursue many of its growth programs. In mid-2021, the company went public through a SPAC merger with a company founded by Richard Branson. 23andMe intends to use the merger to invest in its health and therapeutics division.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
10% employee growth in 12 months
Company
Funding (last 2 of 10 rounds)
Dec 2020
$82.5m
SERIES F
Jul 2018
$300m
GROWTH EQUITY VC
Total funding: $802.9m
Company benefits
- Comprehensive health, vision, and dental plans
- Family planning, support, and leave for parents
- Mental healthcare
- Student loan assistance
- Volunteer time off
- Dog friendly office
Company values
- Think big - We are a mission-driven company with big dreams of using data to revolutionize health, wellness, and research
- We heart DNA - Deciphering the human genome is the most exciting scientific discovery of our lifetime
- Lead with science - We make evidence-based decisions and use data to better understand wellness and improve disease
- Get to yes or no, quickly - Pioneering often means there is not an obvious path forward, but we also recognize that indecision leads to failure
- Behind every data point is a human being - In each drop of spit lies a whole story of ancestry, health & connectedness
- We’re in this together - Diversity and opportunity matter – we know that great ideas come from everywhere and that everyone contributes to our success
Company HQ
Sunnyvale, CA
Articles
Leadership
Anne Wojcicki
(CEO)They studied Biology at Yale before working as a Healthcare Analyst for Investor AB, Ardsley Partners, Andor Capital, and Passport Capital for a combined 7 years. They leveraged this clinical experience to found 23andMe in 2006.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 2 more jobs at 23andMe