Senior Security Engineer, Fastly

• Experience in using and maintaining Splunk for investigating threats, developing detections, normalizing data feeds, and integrating with other tools
• Familiarity of attacker tactics, techniques, and procedures (TTPs) and investigating advanced threats
• Proficiency in one or more general purpose programming languages such as Python, Ruby, Go, or Rust
• Experience with at least one major public cloud infrastructure, such as Amazon Web Services (AWS) or Google Cloud Platform (GCP)
• Familiarity with modern security frameworks and best practices, such as the MITRE ATT&CK framework and NIST CSF
• Experience with Linux administration at scale, associated intrusion/manipulation techniques, and standard methodologies for system hardening and process isolation

Desirable

• As a Senior Security Engineer on our Detection Engineering team, you will develop detections to identify potentially malicious activity and support the investigations of security incidents across the Fastly environment
• We are looking for a teammate with foundations in security engineering and experience in security incident response and detection development
• In this role, you will have the opportunity to mature our detection lifecycle, develop advanced detections, build automations, and support security investigations
• Develop detections and other analytics to identify threats across cloud, corporate, and edge environments
• Investigate potential security threats and support security incidents
• Research, evaluate, implement, and maintain a variety of custom and commercial security tools, such as EDR, SOAR, and SIEM
• Build custom tooling and automations to improve the detection lifecycle and security incident response
• Develop and maintain incident response playbooks and other detection and response documentation
• Conduct threat hunts to discover unknown malicious activity across our environment
• Participate in our on-call rotations

• Posting Open Date: 2/21/25
• Anticipated Posting Close Date*: 4/21/25
• *Job posting may close early due to the volume of applicants
• A fully completed application and resume or CV are required when applying