senior cybersecurity incident response engineer (Seattle, WA)

Starbucks•Seattle, WA

2d•Onsite

About The Position

The Incident Response Engineer Sr manages and conducts cybersecurity incident investigations across Starbucks, contributing to the company’s success through effective investigation and response. The role identifies, triages, and investigates potential security incidents; coordinates containment, remediation, and root cause analysis; and performs forensic investigations across endpoints, networks, and cloud environments. It also documents and maintains incident response playbooks and procedures, develops tools and automation to improve response speed and efficiency, and mentors junior team members as an escalation point. The position calls for strong ownership, problem-solving, communication, and collaboration, alongside a deep understanding of modern cybersecurity threats and protections. The position is onsite four days a week. Starbucks describes its work culture as collaborative and grounded in integrity, collaboration, and excellence.

Requirements

At least 5 years of experience in Information Technology, Information Security, or a similar discipline.
At least 2 additional years of experience in a Security Operations Center (SOC), Incident Response, or similar role responding to alerts or incidents.
Effective written and oral communication skills with technical and non-technical audiences.
Deep technical understanding of modern cybersecurity principles.
Demonstrated experience threat hunting for threat actor TTPs using the MITRE ATT&CK framework.
Ability to balance multiple priorities and meet deadlines.
Ability to quickly learn new technology concepts.
Understanding of compliance and regulatory requirements such as SOX and PCI.
Strong collaboration mindset.
Excellent problem-solving abilities.
Passion for cybersecurity and self-directed interest in becoming an expert.

Responsibilities

Identify, triage, and investigate potential security incidents and threats.
Help coordinate incident containment, remediation, and root cause analysis.
Conduct forensic investigations across endpoints, networks, and cloud environments.
Create, document, and maintain incident response playbooks, runbooks, and standard operating procedures.
Design and develop tools and automation to streamline incident response.
Mentor junior team members and serve as an escalation point.
Model Starbucks’ guiding principles and contribute to a culture of integrity, collaboration, and excellence.

Benefits

Medical, dental, and vision insurance
Basic and supplemental life insurance
Other voluntary insurance benefits
Short-term and long-term disability
Paid parental leave
Family expansion reimbursement
Paid vacation from date of hire
Sick time accrued at 1 hour for every 25 hours worked
Eight paid holidays
Two personal days per year
401(k) retirement plan with employer match for eligible partners
Discounted company stock program (S.I.P.)
Starbucks equity program (Bean Stock)
Incentivized emergency savings and financial well-being tools
100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan
Student loan management resources and other educational opportunities
Backup care
DACA reimbursement