Detection & Response Security Engineer, Harvey

• Demonstrated ability to find weaknesses (e.g. privilege escalation) in real-world corporate networks, cloud environments, or applications
• Hands-on experience responding to security incidents
• Strong understanding of computer networks, operating systems, and cryptographic protocols
• No experience with generative AI or legal is required
• 3+ years of experience in Software Engineering
• 4+ years of experience in Security, Software Engineering, Site Reliability Engineering, or related disciplines

Desirable

• We are looking for a red-teamer to join our blue team to help us develop custom detections and fine-tune our alerting and response automations to defend against real, business-specific, threats
• Your offensive security expertise will be key in prioritizing the right defenses
• You will have the opportunity to build your Software Engineering and System Design skills as you’re working on our modern, large-scale, threat detection platform built on ClickHouse
• As an early member of our Security Detection and Response team, you will play a key role in shaping the foundation of our Detection and Response program
• Build strong relationships with key employees across the organization
• Use your offensive security expertise to develop plausible threat scenarios and identify opportunities for detection
• Assess logs for gaps and implement additional logging as needed
• Build out our threat detection platform to handle increasing volumes of data (currently we handle ~1TB of log volume per day and this will grow ~10x over the next year)
• Lead incident response, as needed
• Develop detection rules and a process for keeping them effective in collaboration with our other D&R Engineers
• Participate in table-top and redteam exercises to evaluate efficacy