Senior Security Engineer, Detection Engineering

Fastly•San Francisco, NY

8d•Hybrid

About The Position

As a Senior Security Engineer on our Detection Engineering team, you will develop detections to identify potentially malicious activity and support the investigations of security incidents across the Fastly environment. We are looking for a teammate with foundations in security engineering and experience in security incident response and detection development. In this role, you will have the opportunity to mature our detection lifecycle, develop advanced detections, build automations, and support security investigations.

Requirements

Expertise in performing security incident investigations and conducting deep-dive log analysis across enterprise environments to identify, mitigate, and remediate cyber threats.
Experience developing high-fidelity detections-as-code.
Experience translating threat intelligence reports into actionable detection logic and threat hunts.
Strong programming ability in one or more general purpose languages (preferably Python)
Experience in securing, identifying threats, and responding to incidents in one major public cloud infrastructure, such as Amazon Web Services (AWS) or Google Cloud Platform (GCP).

Nice To Haves

Familiarity with content delivery networks (CDN), edge cloud platforms, or Fastly products and services.
Experience using AI to enhance detection logic and investigating AI-generated or assisted security threats.
Experience designing and maintaining scalable ETL processes and data pipelines to ingest, transform, and normalize security telemetry for large-scale analysis.

Responsibilities

Develop detections and other analytics to identify threats across cloud, corporate, and edge environments.
Lead security investigations and perform deep-dive analysis across complex log sources and telemetry to identify root causes.
Research, evaluate, implement, and maintain a variety of custom and commercial security tools, such as EDR, SOAR, and SIEM.
Build custom tooling and automations to improve the detection lifecycle and security incident response.
Develop and maintain incident response playbooks and other detection and response documentation.
Conduct threat hunts to discover unknown malicious activity across our environment.
Participate in our on-call rotations.