Senior Security Engineer, GoDaddy

• 5+ years of cybersecurity experience, including 2+ years in senior Incident Response, Security Operations, Threat Detection, or Digital Forensics roles
• Deep expertise securing and investigating AWS environments, including IAM, CloudTrail, Config, CloudWatch, GuardDuty, Security Hub, Detective, VPC Flow Logs, S3 logging, and serverless security controls
• Experience conducting forensic investigations, evidence collection, log analysis, malware triage, and cloud-based incident investigations while maintaining chain-of-custody best practices
• Strong scripting and automation skills with Python, PowerShell, and/or Bash, including building security automations using AWS services such as Lambda, Step Functions, and EventBridge; experience applying AI and ML technologies to security operations is highly desirable
• Strong communication and investigative skills, including technical reporting, executive presentations, and preferred certifications such as AWS Security Specialty, GCIH, GCFA, GCIA, OSCP, or CISSP
• We encourage you to apply even if your experience or skillset doesn’t align perfectly with every requirement. We value a wide range of backgrounds and transferable skills, and we are excited to support learning and growth

Desirable

• We are seeking a highly skilled Senior Security Engineer to join our advanced Security Operations team
• This role is focused on leading complex incident response and forensic investigations across Windows, macOS, Linux, and AWS environments while helping modernize security operations through automation and AI-driven capabilities
• The ideal candidate is a hands-on security expert with deep AWS security expertise, strong threat detection and digital forensic skills, and experience leveraging AI and machine learning technologies to improve detection, response, and operational efficiency
• You will play a key role in protecting critical assets, conducting high-impact investigations, mentoring team members, and driving the evolution of our security program against sophisticated and emerging threats
• Lead high-priority incident response and forensic investigations, serving as the primary escalation point for advanced analysis, containment, recovery, root cause determination, and executive-level reporting
• Drive threat detection and response across AWS, Windows, macOS, Linux, and endpoint security platforms, leveraging services such as GuardDuty, Security Hub, Detective, CloudTrail, IAM, VPC Flow Logs, and SentinelOne
• Conduct malware analysis, host and cloud forensics, evidence collection, and threat hunting activities to identify attack vectors, persistence mechanisms, and business impact while maintaining sound investigative practices
• Design and implement automated security workflows, AI-assisted playbooks, and AWS-native response capabilities to improve detection accuracy and reduce MTTD and MTTR
• Partner with Security, IT, and DevOps teams to enhance security posture, improve processes and tooling, develop detection content, and mentor junior security engineers