Hybrid Staff Information Security Engineer – Threat Defense, Automation

Posted 2 hours ago

Apply now

About the role

  • Staff Information Security Engineer leading advanced threat detection and incident response at Proofpoint. Shaping strategies for complex security investigations and mentoring team members.

Responsibilities

  • Serve as a Level 3 / Staff escalation point for high-severity incidents.
  • Lead investigations into APTs, ransomware, insider threats, and cloud compromises.
  • Act as incident commander and coordinate response efforts.
  • Participate in 24/7 on-call incident response.
  • Lead threat hunting across endpoint, network, identity, and cloud.
  • Operationalize threat intelligence into detections and response.
  • Design and improve detections across SIEM, EDR, and SOAR.
  • Automate incident triage and response workflows.
  • Drive post-incident reviews and continuous improvement.
  • Mentor team members and influence security strategy.

Requirements

  • 12+ years in Incident Response, DFIR, Threat Hunting, or Security Operations.
  • Deep expertise in incident response, threat hunting, and threat intelligence.
  • Strong knowledge of MITRE ATT&CK and adversary TTPs.
  • Experience with SIEM, EDR, SOAR, and cloud security.
  • Scripting experience (Python, PowerShell, or Bash).
  • Strong communication and leadership skills.
  • US Citizen.

Benefits

  • Competitive compensation
  • Comprehensive benefits
  • Career success on your terms
  • Flexible work environment
  • Annual wellness and community outreach days
  • Always on recognition for your contributions
  • Global collaboration and networking opportunities

Job title

Staff Information Security Engineer – Threat Defense, Automation

Job type

Experience level

Lead

Salary

$137,000 - $275,275 per year

Degree requirement

No Education Requirement

Tech skills

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job