Associate Threat Intelligence & Response Engineer

LendingClub•San Francisco, CA

1d•Hybrid

About The Position

We are looking for an Associate Threat Intelligence & Response Engineer to help detect, investigate, and respond to internal and external security threats. This role combines hands-on incident response with security tooling and automation and is critical to strengthening the company’s overall security posture. You will be responsible for analyzing and responding to security incidents, improving detection capabilities, and building scalable solutions to prevent future threats.

Requirements

1-2 years of experience in Security Operations, Incident Response, or a related field
Strong experience with SIEM platforms (e.g., Splunk) and event correlation
Hands-on experience in incident response, threat detection, and analysis
Familiarity with enterprise security tools (EDR, IDS/IPS, vulnerability management)
Solid understanding of networking (TCP/IP), operating systems (nix, Windows), and cloud environments (AWS)
Experience writing detections, enrichment logic, or response automation scripts
Actively use AI to improve your work — from accelerating analysis and detections development to thinking through problems from a different angle
Thoughtful about accuracy and data sensitivity, and bring ideas for how the team can work more effectively using AI
Ability to assess threats and communicate findings clearly to technical and non-technical stakeholders
Comfortable operating in fast-paced environments with ambiguity and competing priorities
Strong judgment, integrity, and understanding of security ethics
Bachelor’s degree in computer science or a related field; or equivalent work experience

Nice To Haves

Experience developing tools or scripts (e.g., Python)
Background in building scalable detection or response frameworks
Project management experience

Responsibilities

Investigate, triage, and respond to security incidents across cloud and on-prem environments
Analyze security events and logs to identify anomalous or malicious activity
Develop, tune, and maintain SIEM detections and alerting logic
Design, build, and manage tools for detection, enrichment, and response automation
Conduct threat analysis to determine scope, impact, and containment actions
Collaborate with cross-functional teams to remediate systemic security issues
Identify trends in incidents and recommend improvements to reduce risk
Develop and maintain incident response runbooks and lead tabletop exercises
Build deep familiarity with the company’s technology stack to identify security gaps