Security Engineer, Asana

• 5+ years of experience in security operations, incident response, threat detection, or vulnerability management
• Strong experience with SIEM platforms (e.g., Panther, Splunk, Elastic Security) for log analysis, alert correlation, and dashboard creation
• Deep working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike, SentinelOne) and their capabilities
• Proven experience in developing and implementing security automation using scripting languages (e.g., Python, PowerShell) or orchestration tools
• Experience performing security incident investigations and forensic analysis
• Familiarity with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK
• Hands-on technical expertise in at least two of the following areas: Cloud Security, Detection & Response, Digital Forensics, Network Security, Abuse, or Fraud
• Experience working in environments composed primarily of SaaS and cloud resources
• Track record of successfully leading incident response projects and mentoring engineers on security operations
• Experience making technical trade-offs and articulating them clearly to stakeholders at different levels, both internal and external
• Excellent communication skills, able to explain complex technical concepts clearly to both technical and non-technical partners
• Customer-obsessed mindset with a drive to deliver the best possible experience and outcomes for Asana's customers and users
• A pragmatic and collaborative mindset, with a passion for building robust defences and enabling other engineers to do their best, most secure work
• Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making

Desirable

• We are looking for a Security Engineer, Threat Response to join our Security blue team in New York City
• You'll be a foundational member of the security presence in a key hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection, response, and vulnerability management capabilities
• You will be instrumental in scaling our security practices by building effective monitoring, automating repetitive security operations tasks, and championing a security-first mindset
• This role sits within the Security Threat Operations and Response Management (STORM) group, responsible for the security of Asana the company and the security of the product — ensuring we maintain customer trust and are able to grow sustainably
• You will collaborate with teams across the company including Infrastructure, Customer Success, Legal, IT, and other key stakeholders to drive better incident response outcomes
• Lead security incident detection, analysis, and response efforts, ensuring timely and effective remediation of security incidents
• Actively participate in and lead the on-call rotation, setting the standard for security incident management across the team
• Manage and mature our vulnerability management program, including scanning, assessment, prioritization, and tracking remediation efforts
• Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms
• Develop, implement, and maintain security playbooks and automation scripts to streamline security operations and reduce manual toil
• Monitor security alerts and threat intelligence feeds, proactively identifying and addressing emerging threats
• Conduct forensic analysis during security incidents to understand the scope and impact of incidents
• Lead retrospectives to help raise engineering excellence and embed a continuous improvement culture across the team
• Drive incident management and incident response best practices across the company, mentoring fellow engineers through pairing, process definition, and training exercises
• Participate in and help lead tabletop exercises to ensure different stakeholders are thinking about and preparing for incidents across the company
• Collaborate with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations
• Stay informed of industry trends, emerging threats, and best practices in security operations, detection, and response to ensure Asana's security posture remains robust
• Collaborate with teammates and stakeholders to develop both short-term and long-term strategies for risk management