Senior Security Engineer, Detection and Response

Tel Aviv - Hybrid, Remote. Posted a month ago

The role

This person will build detections, hunts, and automations to protect cloud infrastructure, crypto systems, endpoints, and network. They will also act as a purple teamer to emulate attacks and validate detection effectiveness.

What you will do

Ship production-grade detections as code.
Run purple team exercises to confirm detection effectiveness.
Execute proactive threat hunts based on threat intelligence.
Build automations to accelerate investigation and triage.
Create and maintain runbooks and incident write-ups.
Identify gaps and integrate tools across endpoints, cloud, network, and signing systems.
Own complex, ambiguous, or multi-stage incidents from triage through recovery.
Design and run purple-team exercises in partnership with other engineering teams.
Communicate with engineering leadership and cross-functional stakeholders during major incidents.
Mentor junior members of the team.

Required qualifications

5-8+ years of experience in security operations, detection engineering, offensive security testing, or a related security engineering role.
Experience owning complex, ambiguous, or multi-stage incidents from initial triage through containment, eradication, and recovery.
Deep, hands-on expertise in SIEM and EDR platforms.
Ability to design new detections from scratch.
Ability to design and run purple-team exercises.
Ability to make build-vs-buy calls regarding tools and architecture.
Ability to automate repetitive security workflows.
Ability to produce original threat intelligence assessments and run proactive threat hunts.
Ability to communicate fluently with engineering leadership and cross-functional stakeholders.
Ability to mentor junior members of the team.
Comfortable participating in an on-call rotation.
Ability to act as incident commander when needed.

About the company

Paxos is rebuilding financial infrastructure to enable the instant movement of any asset. They build blockchain infrastructure that tokenizes, custodies, trades and settles assets for leading financial institutions.