Sr. Incident Response Engineer

frontdoor, Inc.•,

1d•$133,000 - $155,000

About The Position

As a Senior Incident Response Engineer, you will work with a team of engineers in a newly formed incident response practice at Frontdoor, a remote-first, cloud-native company. The role conducts full-cycle incident response, including alert triage, investigation, containment, remediation, and reporting, while ensuring sensitive cases receive proper approvals and are handled confidentially. It also calls for strong technical and communication skills, process improvements and documentation, and automation of routine investigations to strengthen the organization's security posture and enable more impactful responses. The engineer partners with other teams, provides investigatory support during tense situations, and helps mentor junior engineers.

Requirements

At least 7 years of experience in security, Security Operations, Incident Response, or Security Engineering, including 3 years in incident response.
Experience running incidents from a security responder point of view.
Strong writing, communication, and mentoring skills.
Ability to think strategically and make effective, timely decisions.
Network fundamentals and Windows and Mac OS internals knowledge.
Knowledge of data leakage prevention from classification through containment and remediation.
Experience with logging platforms such as LogScale, ELK, or Splunk.
Cloud security experience with AWS, GCP, Azure, or Oracle Cloud.
Deep experience with EDR or XDR tools such as CrowdStrike, Carbon Black, or SentinelOne.
Container security experience, including creating containers and understanding how to investigate processes from the OS or host level.
Experience with AWS, GCP, and Azure cloud infrastructure, Docker, Kubernetes, LogScale or Elastic, Tines or another automation tool, and Zscaler or Palo Alto Networks.
Programming or scripting skills in Python, Bash, or shell script.
Bachelor's degree in computer science, cybersecurity, IT, or a related field.

Nice To Haves

Experience with cloud security incident response in AWS or similar environments.
Familiarity with threat intelligence platforms and external threat feeds.
Experience supporting investigations involving data exfiltration or insider risk.
Exposure to security automation, alert enrichment, or response orchestration tools.
Knowledge of email security platforms and phishing response workflows.

Responsibilities

Conduct full-cycle incident response, including alert triage, investigation, containment, remediation, and reporting.
Ensure sensitive incident cases are managed with appropriate approvals and confidentiality.
Support incident response process improvements and documentation.
Automate routine investigations to improve the organization's security posture and response impact.
Partner with other teams and provide investigatory support during incidents and other tense situations.
Mentor and teach junior engineers.