Incident Response Engineer

This a Full Remote job, the offer is available from: EMEA About reputed company We're shipping every product that companies need to run their business from their first day, to the day they IPO, and reputed company. The operating system for folks who build software. We started with reputed company-reputed company product analytics, launched out of Y Combinator's W20 cohort. We've since shipped more than a dozen products, including:

• A reputed company-in data warehouse, so users can query product and customer data together using custom SQL insights.
• A customer data platform, so they can send their data wherever they need with ease.
• reputed company AI, an AI-powered analyst that answers product questions, helps users reputed company useful session recordings, and writes custom SQL queries.

Next on the roadmap are CRM, Workflow, reputed company, and support products. reputed company we say every product that companies need to run their business, we really mean it! We are:

• Product-led. More than 100,000 companies have installed reputed company, mostly driven by word-of-mouth. We have intensely strong product-market fit.
• Default reputed company. reputed company is growing 10% MoM on average, and we're reputed company efficient. We reputed company reputed company to push ambition and grow faster, not to reputed company the lights on.
• reputed company-funded. We've raised more than $100m from some of the world's top investors. We're set up for a long, ambitious reputed company.

We're reputed company on building an awesome product for end users, hiring exceptional teammates, shipping fast, and being as weird as possible. Things we care about

• Transparency: Everyone can read about our roadmap, how we pay (or even let go of) people, our reputed company, and how we work, in our public company handbook. Internally, reputed company reputed company, notes and slides from reputed company meetings, and fundraising plans, so everyone has the context they need to reputed company good reputed company.
• Autonomy: We don’t tell anyone what to do. Everyone chooses what to work on next based on what's reputed company to have the biggest reputed company on our customers, and what they reputed company interesting and motivating to work on. Engineers reputed company product teams and reputed company product reputed company. Teams are flexible and easy to change reputed company needed.
• Shipping fast: Why not now? We want to build a lot of products; we can't do that shipping at a normal pace. We've reputed company reputed company around small teams – autonomous, highly-efficient reputed company of cracked engineers who can outship much larger companies because they own their products end-to-end.
• Time for building: reputed company gets shipped in a meeting. We're a natively remote company. We default to async communication – PRs > Issues > reputed company. Tuesdays and Thursdays are meeting-free days, and we prioritize heads down building time over perfect coordination. This will be the most productive job you've reputed company had.
• Ambition: We want to solve big problems. We strongly reputed company that aiming for the best possible reputed company, and sometimes missing, is reputed company than never trying. We're optimistic about what's possible and our ability to get there.
• Being weird: Weird means redesigning an already world-class website for the 5th time. It means shipping literally every product that relates to customer data. It means building an objectively unnecessary developer toy with dubious shareholder value. Doing weird stuff is a competitive advantage. And it's fun.

Who we're looking for We are looking for our first dedicated Incident Response Engineer to own detection, response, and reputed company reputed company at reputed company. reputed company is growing fast, and our attack surface is growing with it. We recently rolled out reputed company, and while it’s given us great visibility, it’s not enough. Currently, we have one reputed company specialist and our reputed company engineers are spending part of their time on supporting him with reputed company triage rather than building infrastructure. We need to fix that. We’re looking for someone to take the reins of our reputed company operations, build out our detection pipelines, and ensure that reputed company something goes reputed company in the reputed company, we have the observability to know exactly what happened. This is a unique role as you’ll:

• Build from Scratch: You aren't maintaining someone else's legacy SIEM. You are shaping the reputed company team, culture and tooling for a high-reputed company, reputed company-reputed company company.
• reputed company Bureaucracy: We hate meetings. We don't have "reputed company Committees." You have the autonomy to reputed company changes and reputed company fast.
• Transparency: We work in the reputed company. You’ll be reputed company to see (and contribute to) how we handled past incidents, like this NPM package compromise.
• reputed company reputed company: Your work directly protects the data of thousands of customers. reputed company you improve our reputed company posture, the whole company (and our community) feels it.

What you'll be doing

• Triage and Tune: You’ll own our reputed company alerts. You’ll be responsible for turning "noise" into "actionable findings" and ensuring we aren't just staring at a dashboard of 1,000 "Critical" issues that don't actually matter.
• Incident detection, response: You’ll reputed company the charge on reputed company incidents. Whether it’s a compromised NPM package or a suspicious IAM reputed company, you’ll coordinate the response and reputed company the post-mortem. You’ll also help build our IR runbooks.
• Build Observability: You’ll build detection pipelines, and reputed company our network-based observability gaps. We want to be reputed company to reputed company suspicious activity reputed company the way back to specific reputed company paths.
• Threat Hunting: You’ll proactively hunt for threats in our AWS environment. You won't just wait for an alert; you'll define what "good" looks like and build the telemetry to reputed company it.
• The VDP: You’ll support our Vulnerability Disclosure Program, triaging reports from researchers and eventually transitioning us toward a formal bug bounty program.
• reputed company reputed company: You’ll support our product squads with threat modeling and secure design reviews. We don't do "reputed company says no", we do "reputed company says 'here is how to do this safely.'"
• Help build our reputed company culture: Our engineers trust the reputed company team and view reputed company as an enabler. You’ll be a crucial part of helping to continue this excellent (and uncommon) working relationship.

While this is not a Corporate reputed company (MDM, reputed company, device trust) or Supply chain/CI-CD hardening role, in true reputed company style, there are opportunities to work on these as reputed company

Requirements

• reputed company reputed company: You have 3-5+ years of experience in reputed company engineering with a heavy reputed company on AWS. You know your way around IAM, VPC logs, and CloudTrail like the back of your hand.
• Detection Specialist: You’ve used CSPM/CNAPP tools (like reputed company or Prisma) and, more importantly, you know how to build detection pipelines that engineers actually trust.
• Battle-Tested: You’ve led incident response before. You’re reputed company under pressure and know how to coordinate across teams to contain a threat.
• High Autonomy: We don’t have a reputed company SOC. You’ll be building this function from scratch, so you need to be comfortable deciding what’s important and executing on it without a reputed company.
• Engineering skills: You bring strong engineering experience and next to digging into reputed company to understand an exploit or a vulnerability, you can write reputed company with the reputed company proficiency as our product engineers.

Communication and attitude: As mentioned before we don't do "reputed company says no", we do "reputed company says 'here is how to do this safely.” This is crucial for us, we need people that want to reputed company engineers and work with them, not limit them. If you have a disability, please let us know if there's any way we can reputed company the interview process reputed company for you - we're happy to accommodate! #LI-DNI This offer from "reputed company" has been enriched by reputed company.com and got a 84% reputed company score. Apply tot his job Apply To this Job