Senior Security Engineer, Incident Response

Airbnb Airbnb · Consumer · United States · Security

Senior Security Engineer focused on incident response and threat detection within Airbnb's Threat Detection and Response team. Responsibilities include investigating security incidents, performing digital forensics, hunting for threats, and building automation and detection models. Requires 5+ years of experience in security operations, proficiency in Python, and familiarity with security frameworks like MITRE ATT&CK.

What you'd actually do

  1. Perform investigations of security incidents using your knowledge of digital forensics and data analytics.
  2. Use your coding, data analytics and investigation skills to hunt, detect and respond to threats.
  3. Build automation and detection models to support identification of anomalous activity and response activities to mitigate threats at scale.
  4. Hunt for threats in our corporate and production environments to proactively identify anomalous activity.
  5. Work side by side with our engineering teams to build advanced detection solutions to help keep systems and information safe, and partner closely with partner teams to carry out complex investigations.

Skills

Required

  • Python
  • SQL
  • Pandas
  • digital forensics
  • data analytics
  • threat hunting
  • detection engineering
  • Cyber Kill Chain Framework
  • MITRE ATT&CK Framework
  • security operations
  • incident response
  • incident management
  • threat intelligence

Nice to have

  • Elasticsearch
  • AWS services (EC2, S3, Lambda, RDS)

What the JD emphasized

  • 5+ years of hands-on in-depth knowledge and technical experience in security operations including investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, and/or detection engineering.
  • Proficiency in Python or other scripting language.
  • Experience automating security detection and response.