Security Engineer - US

Upwind Security • San Francisco, CA

17h

About The Position

Upwind is a cloud security platform that uses runtime context to identify and prioritize critical risks and provide cloud security management insights. The Security Engineer will join the MDR team as the founding U.S. member of the Security organization. The role focuses on proactive customer-environment reviews, advanced customer guidance, and independently owning coverage during U.S. hours. The engineer will work closely with analysts, researchers, and engineers, with a stated path toward technical or team leadership as the U.S. presence grows.

Requirements

• Hands-on cybersecurity experience, ideally at a leading cloud or cloud security company, with real-world exposure to cloud environments.
• Strong working knowledge of detection engineering, incident response, and threat analysis, including the ability to explain supply chain, API, malware, and runtime attack techniques in depth.
• Hands-on experience with at least one major cloud platform: AWS, GCP, or Azure.
• Experience with container technologies such as Docker or Kubernetes.
• Comfort working hands-on with Linux.
• Strong communication and presentation skills, with the ability to engage directly with customers and remain composed under pressure or pushback.
• Ability to work independently in a fast-paced, high-ownership startup environment.
• Curiosity, a problem-solving mindset, and a personal interest in security beyond the day job.
• Availability to participate in a shared on-call rotation, including nights, weekends, or holidays during the assigned rotation week.
• Visa sponsorship is not available.

Nice To Haves

• Windows knowledge.
• Familiarity with networking fundamentals and scripting in Python or Bash.
• B.Sc. in Computer Science or Information Security.

Responsibilities

• Assist in fine-tuning Upwind’s detection and response mechanisms.
• Review customer environments proactively to identify risks and exposed attack surfaces, and recommend improvements.
• Lead in-depth security investigations involving supply chain, API, malware, and runtime attack scenarios; document outcomes and develop playbooks to improve future detection and response.
• Collaborate with Security Analysts, Research, and Backend teams to improve detection quality.
• Handle complex or critical incidents escalated from Tier 1/2, including live, high-pressure customer engagements.
• Participate in recurring customer meetings, translate security findings into clear, actionable recommendations, and maintain composure during tense conversations.
• Stay current with emerging threats, attack techniques, attack surfaces, and cloud security best practices.
• Contribute to developing and training AI-driven detection models using machine learning to improve investigation accuracy and response efficiency.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level