Security Engineer - US

Upwind Security • San Francisco, CA

5d

About The Position

Upwind is hiring a Security Engineer to join its MDR team as the founding U.S. member of the Security organization. The role focuses on proactive customer security reviews, advanced guidance, and independently owning coverage during U.S. hours. The engineer will work closely with analysts, researchers, and engineers, with a stated path toward technical or team leadership as the U.S. presence scales.

The position involves improving detection and response, investigating complex security scenarios, advising customers, and contributing to AI-driven detection models. It includes a shared on-call rotation; escalations are described as infrequent, but the engineer is expected to be available for nights, weekends, or holidays during their rotation week. Visa sponsorship is not available.

Requirements

• Hands-on cybersecurity experience, ideally at a leading cloud or cloud security company, with real-world exposure to cloud environments.
• Strong working knowledge of detection engineering, incident response, and threat analysis, including the ability to explain supply chain, API, malware, and runtime attack techniques in depth.
• Hands-on experience with at least one major cloud platform: AWS, GCP, or Azure.
• Experience with container technologies such as Docker or Kubernetes.
• Comfort and hands-on experience with Linux.
• Familiarity with networking fundamentals and scripting in Python or Bash.
• Strong communication and presentation skills, with the ability to engage directly with customers and remain composed under pressure or pushback.
• Self-directed, comfortable working independently, and able to operate in a fast-paced, high-ownership startup environment.
• Curiosity, a problem-solving mindset, and a personal interest in security beyond the day job.
• Availability for nights, weekends, or holidays during an assigned on-call rotation week.

Nice To Haves

• Windows knowledge.
• B.Sc. in Computer Science or Information Security.

Responsibilities

• Assist in fine-tuning Upwind's detection and response mechanisms.
• Review customer environments proactively to identify risks and exposed attack surfaces, and recommend improvements.
• Lead in-depth investigations into supply chain, API, malware, and runtime attack scenarios; document findings and develop playbooks to improve future detection and response.
• Collaborate with Security Analysts, Research, and Backend teams to enhance detection quality.
• Handle complex or critical incidents escalated from Tier 1/2, including live, high-pressure customer engagements.
• Participate in recurring customer meetings and translate security findings into clear, actionable recommendations while maintaining composure during tense conversations.
• Stay current with emerging threats, attack techniques, attack surfaces, and cloud security best practices.
• Contribute to developing and training AI-driven detection models, using machine learning to improve investigation accuracy and response efficiency.
• Participate in a shared on-call rotation, including availability for nights, weekends, or holidays during the assigned rotation week.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed