Senior Security Engineer - Detection and Response

Weight Watchers

21h•Hybrid

About The Position

As the Senior Security Engineer - Detection and Response, you will be working alongside an existing team of experienced security engineers and partnering closely with technologists across the company to help build the future of digital health security and protect our patients. Security works end-to-end, from the deepest infrastructure to the patient experience, ensuring patients are safer by being with WW. This role involves building and maturing a detection and response program, detecting and responding to security incidents, and participating in an on-call rotation. You will develop innovative ways to detect security incidents, design and build security for the future of the company's infrastructure, and partner with various teams to improve cloud security posture. The role also includes creating solutions to identify, resolve, and mitigate security vulnerabilities and risks, researching threats, and devising defense-in-depth strategies. Additionally, you will mentor and share security standards across the organization.

Requirements

Expertise responding to complex incidents across endpoint, network, and cloud
Capable of understanding an unfamiliar system enough to successfully respond to an incident involving the system
Expertise in detection engineering
Experience with SIEM, EDR, and CSPM tools
Deep understanding of the threat landscape
Experience with assessing risks
Experience in cloud security, especially for AWS, anything to do with IAM, secure configuration of services, AWS native security services like AWS Cloudtrail, SCP’s, AWS Org, Config etc.
Ability to understand the whole solution, not just the technology
Focus on the end to end lifecycle of solving a problem and solutioning for it and not just implementing a security technology. Have a well-rounded view for problem solving
Deep care for the patient and your fellow employees experience as you surpass security challenges
Hunger to drive decision making, collaboration and to have deeper opinions on security design
You can review different design choices and can understand/discuss pros and cons for each
Ability to code to automate tedious tasks
Experience with Infrastructure as Code. We use terraform!
Strong collaboration skills with the wider security team and engineering at WW

Responsibilities

Build and mature a detection and response program
Detect and respond to security incidents and participate in an incident on-call rotation
Develop innovative ways to detect security incidents
Design and build the security for the future of our infrastructure
Partner with the infrastructure team, engineering team, compliance team and within security teams to maintain and further improve our cloud security posture
Create solutions and processes to identify, resolve and mitigate security vulnerabilities and risks
Research threats and attack vectors that impact WW applications and infrastructure
Devise and bolster defense-in-depth through secure-by-default frameworks, architectures and processes
Mentor and share security standards and processes with all parts of the organization