Senior Threat Response Engineer

Role

We are looking for a Senior Threat Response Engineer to join our team. This is a Remote (USA Only) role, reporting to the Senior Manager, Threat Response Engineering in the ZSS - Security Services department. In this position, you will be responsible for responding to confirmed compromises on customer endpoints subscribed to the Active Remediation MDR service.

What you’ll do (Role Expectations)

Perform investigations into detected threats and leverage security products to analyze, contain, and remediate threats in customer environments
Provide customers with thorough reports of actions taken to ensure clarity on environment cleanup and protection strategies
Identify and implement effective response strategies to further enhance the security posture of the customer base
Collaborate with Detection Engineering, Threat Hunting, Intel, and Product teams to develop innovative methods for timely threat remediation
Prioritize and execute tasks effectively in a fast-paced operational environment while participating a 24x7 on-call rotation

Who You Are (Success Profile)

You thrive in a dynamic, fast-paced environment, viewing ambiguity not as a hindrance but as the raw material to build meaningful solutions.
You act like an owner with a strong passion for the mission and a bias for action, navigating seamlessly between high-level strategy and hands-on execution.
You are a natural problem-solver who is energized by finding solutions to complex technical challenges, knowing that tackling hard problems delivers the biggest impact.
You are a lifelong learner with a true growth mindset, actively seeking feedback to continuously develop yourself and become a stronger teammate.
You are driven by innovation, possessing a deep curiosity for how things work and a belief in the power of technology to accelerate transformation.

What We’re Looking for (Minimum Qualifications)
Very strong analytical and problem-solving skills demonstrated through direct experience responding to security events and threats
Mastery of Endpoint Detection and Response (EDR) products including CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or CarbonBlack
Deep understanding of internal system functionality for Windows and MacOS operating systems
Demonstrated understanding and experience with AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
Professional and articulate communication skills with the ability to provide clear technical documentation
Ability to work Monday - Friday 8:00am - 4:00pm MT and ability to participate in a recurring, monthly on-call rotation

What Will Make You Stand Out (Preferred Qualifications)

Strong understanding of security operations, enterprise technology, and network controls or protocols
Experience utilizing AI-augmented development platforms to drive security automation, with a demonstrated capability to proactively refine or engineer new AI-based solutions that enhance operational velocity and tool efficacy
Understanding of current and emerging adversary tactics and techniques, and the ability to practically apply this knowledge