Security Engineer, Incident Response

Peloton•New York, NY

1d•$112,300 - $151,500•Hybrid

About The Position

Peloton continues to grow and deliver the connected fitness platform of the future to help our members be the best version of themselves. As a technology-enabled business, our approach to security operations must evolve and grow alongside our services and members. We are looking for a Security Engineer with a diverse set of skills that can thrive in a challenging, fast-paced, and rewarding environment. We do not have a traditional SOC tier structure, so you can expect to help us improve our detections as well as create additional detections, build automations, and research & help define the solutions roadmap to achieve scale. The right candidate should have a strong focus on results, be self-driven, and be excited by working on a diverse set of problems, threats, and alerts.

Requirements

Minimum 3 years in Information Security
Experience in incident response or threat detection required
In-depth knowledge of cloud environments (AWS, GCP, Azure, Kubernetes), SaaS platforms (O365, Google Workspace), or IAM
Strong knowledge of Incident Response principles and processes
Experience with Automation specifically for Alert Intake/Triage/Incident Handling
Expert experience with SIEM tools or data lakes
Experience with dissecting attacker methodologies and techniques and/or EDR tooling
Excellent analytical and problem solving skills
Comfortable using AI coding tools as a primary development accelerator to build and ship homegrown security solutions
A learning mindset and excitement for learning new technologies or security areas

Nice To Haves

Relevant certifications: GCIH, GCFE, GCIA, GCFA, AWS Security Specialty

Responsibilities

Directly support Peloton’s Security Program while conducting in-depth research and strategic analysis of intelligence data from various sources to leverage in threat hunting
Stay up to date with relevant vulnerabilities, threat actors, indicators of compromise (IOCs) tactics, techniques, and procedures (TTPs), and trends, identifying actionable areas of interest and threats
Provide intel-driven insights into existing and emerging threats, use insights to search Peloton enterprise for activity that is anomalous and/or malicious
Work with Security Engineering and the Security Operations Center to baseline user behaviors and events as well as build out new detections and response workflows
Provide triage support for incident response and investigation efforts as part of Peloton’s Security and Operations team and other internal teams
Recommend and build countermeasures based on threat analysis, intelligence, and forecasting
Develop, implement, and maintain security incident playbooks/runbooks
Prepare and present analysis with findings and recommendations in the form of briefings, reports, and dashboards to managers, various team leads and senior leadership as required
Identify repetitive, high-volume SOC workflows and systematically eliminate them through AI-powered triage pipelines, LLM-assisted investigation, and end-to-end automation
Design and ship homegrown security tooling where commercial solutions fall short, owning the full lifecycle from requirements through iteration — leveraging AI-assisted development to move fast and maintain high quality
Translate threat intelligence and incident learnings into prioritized, actionable control recommendations that reduce risk without slowing the business