Security Software Engineer (Detection & Response)

Join Pinterest as a Security Software Engineer focused on Detection & Response. In this role, you will build and implement detection and response improvements, manage logging pipelines, develop internal tooling, respond to alerts, collaborate with cross-team partners, hunt for undetected threats, and leverage AI to enhance security engineering. Candidates should have a strong knowledge of intrusion detection and incident response, experience with threat intel, familiarity with multiple sources of telemetry, and a bachelor's degree in a related field.

This role will need to be in the office for in-person collaboration 1-2 times every 6-months and therefore can be situated anywhere in the country

USD 123,696 - 254,667

Responsibilities

• Construire des alertes et des flux de travail d'automatisation pour améliorer les capacités de détection et de réponse aux menaces.
• Gérer nos pipelines de journalisation et notre infrastructure, et intégrer de nouvelles sources de journalisation pour améliorer notre couverture de détection.
• Développer et maintenir des outils internes pour étendre et automatiser les capacités de détection et de réponse de l'équipe.
• Strong knowledge of intrusion detection and incident response with an engineering focus in a modern cloud first environment
• High integrity and ownership: you protect sensitive data, avoid over-reliance on AI, and remain accountable for final decisions and deliverables

Requirements

• Experience consuming threat intel and applying it to improve detection capabilities
• Familiarity with using multiple sources of telemetry for threat investigations: Eg. EDR, Osquery, Firewall logs
• Knowledge of the attacker lifecycle, common attack and detection techniques
• Understanding of networking technologies and/or network security, basic TCP/IP network fundamentals
• Bachelor’s degree in Computer Science, Cybersecurity or, a related field or equivalent experience
• Hands on experience with writing SIEM queries for alerting, response, and threat hunting
• Strong track record of critical evaluation and verification of AI-assisted work (e.g., testing, source-checking, data validation, peer review)
• Depth in ideally MacOS internals, or alternatively in Linux/UNIX or Windows internals, persistence mechanisms, privilege escalation techniques
• Scripting or automation experience (e.g., Python, Go, Ruby) for tool development or integration
• Demonstrated ability to use AI to improve speed and quality in your day-to-day workflow for relevant outputs