Security Engineer

Title: Security Engineer 

Department: InfoSec 

Reports To: VP, Information Technology

FLSA Status: Exempt 

Location: US Remote

At Prove, Security Engineers handle the digital security for our company and our products. Our Security Engineers are the first line of defense against malicious actors. Their duties include operating and maintaining our cyber security system and our IT security infrastructure, building digital security protocols, and proactively scanning our company’s digital assets for weaknesses and creating robust countermeasures to prevent future incidents.

This role will specifically focus on Incident Response and Detection & Automation. This role will play a key role in detecting, responding to, and automating the defense against security threats across our infrastructure. 

Key Responsibilities:

As a member of the Information Security team, a Security Engineer will:

• Act as a technical lead within a rapidly growing cyber security group and develop team objectives to resolve outstanding risk and identify new areas of exposure.
• Lead incident response efforts: triage, investigate, contain, and remediate security events in real time
• Develop and tune detection rules across SIEM, XDR, DLP, and other security platforms
• Automate manual security operations using SOAR, scripting, and API integrations to enhance efficiency and consistency
• Build and maintain playbooks for a variety of incident types (e.g., phishing, malware, insider threats, cloud misconfigurations, etc)
• Continuously improve detection logic using threat intelligence and post-incident analysis
• Collaborate with platform and engineering teams to ensure logging, alerting, and monitoring coverage is comprehensive
• Perform threat hunting activities and proactively identify anomalous activity across systems and networks
• Contribute to post-incident review, root cause analysis, and security metrics/reporting

Qualifications:

• 3+  years of related experience in Security Operations, Detection Engineering, and Incident Response.  This is a mid-career-level opportunity where you will be a mentor and an individual contributor.
• Bachelor’s degree in IT, information security, computer science, or a related field and/or equivalent  work/military experience.
• Hands on experience with SIEM, EDR, DLP, and/or SOAR tools

• Strong understanding of attack vectors, tactics, techniques, and procedures using frameworks like MITRE ATT&CK
• Knowledge of Incidence Response policy, process, and execution.
• Knowledge of common security controls and practices in cloud platforms
• Passion for learning about our products and markets through in-house and external training.
• Promote, maintain and enhance our cultural values of humility, passion, inclusion, and leadership.

Preferred Qualifications:

• Experience in high-growth /pre-IPO Technology companies
• Understanding of PCI DSS, HIPAA, SOC 2 Type 2 and NIST requirements and policies.
• Familiarity with container security, cloud security posture management, and/or identity-related incidents

This position description should not be considered the final description of the position. The position description is not intended to be an all-inclusive list of duties and standards of the positions. It should be assumed that we would, to some extent, structure responsibilities in accordance with the successful candidate’s capabilities and changing business conditions. Incumbents will follow any other instructions, and perform any other related duties, as assigned by their supervisor.

The anticipated salary range for this role is $118,000 - $125,000 plus variable commission / company bonus. Offered salary will be determined by the applicant’s education, experience, knowledge, skills, geo-location and abilities, as well as internal equity and alignment with market data.