Senior/Staff Security Engineer, Incident Response

A senior or staff engineer who owns detection and incident response at Grow Therapy, a healthcare marketplace. The engineer builds out the detection and response program with fresh approaches to spotting threats early, investigates incidents across endpoint, network and cloud, joins the on-call rotation, researches the attacks most likely to target the business, and works with infrastructure, engineering and compliance to harden the AWS estate and design out weaknesses.

Grow wants six or more years in detection and incident response, deep AWS security knowledge (IAM, CloudTrail, SCPs, Organizations, Config), strong SIEM, EDR and CSPM experience, and coding skills for automation and infrastructure as code. The role is fully remote or hybrid three days a week from New York, San Francisco or Seattle, with two or three trips a year.