Security Investigation

Security Investigation Engineer Jobs

3 jobs found

1mo ago

Staff Security Engineer, Detection & Response

Maven Clinic San Francisco, CA

San Francisco, CA

1mo ago Closed

$221k - $299k/yr Full time Senior Detection And Response Incident Response

This position is no longer accepting applications (closed Oct 28, 2026).

Job Description

Maven Clinic is scaling how security detection and response works as it grows its platform and internal engineering practices. This role owns Incident Detection and Response end-to-end, combining hands-on investigation, detection engineering, and SDLC hardening while managing the evolving security risks introduced by AI, LLMs, AI-generated code, and agents.

In a hybrid setup based in San Francisco, CA, you will lead investigations, validate alerting behavior, and help ensure security tooling has the logging and visibility it needs to perform reliably across modern production systems.

Role overview

Own Maven Clinic’s Incident Detection and Response program, including threat modeling, leading investigations, proactive hunting and hardening of the SDLC, and building and validating detection engineering.
Manage security risk as AI, LLMs, AI-generated code, and agents expand across the codebase and internal adoption.

Responsibilities

Lead investigations hands-on: pull logs, build the narrative of what occurred, and advise business and engineering leaders on next steps.
Read production code when needed to understand what is actually happening.
Hunt for bugs in the codebase and weaknesses in the SDLC where problems can bypass existing controls.
Propose and implement fixes personally, or manage resolution with the right teams, including code fixes and broader process or control changes.
Partner with the Product Security Engineer on golden paths when a weakness indicates a systemic gap.
Own and tune detection logic running through 7AI, validating investigations and escalations, and setting alert criteria.
Close gaps in logging and visibility so tooling has the right data to operate effectively.
Help manage security risks related to growing use of LLMs and AI tooling, both in what the team builds and what is adopted internally.

Requirements

6+ years of security experience combining hands-on software or AppSec depth with detection and SIEM engineering ownership.
Ability to read production code across multiple languages and stacks well enough to judge whether a finding is truly exploitable.
Experience building threat models for codebases, including attack surface, trust boundaries, and data flow reasoning.
A track record of identifying and fixing systemic weaknesses surfaced through incidents or proactive review.
Strong communication skills, with enough credibility to direct an investigation and influence peers informally.

Technologies

7AI
LLMs
SIEM

Strongly preferred

Hands-on experience with AI-assisted security operations tooling such as AI SOC platforms, LLM-based triage, or agentic escalation systems.
Interest or experience securing AI and LLM-powered systems, including risks like prompt injection, model misuse, or agentic tool abuse.
Prior exposure to golden-path or secure-by-default infrastructure initiatives (even in a supporting role).
Experience with container or image security and the patching lifecycle.
A relevant certification such as GCIH, GCFA, GCDA, OSCP, or CISSP.

Compensation

Base salary range: USD 221,000 - 299,000 per year.
You will also be entitled to receive equity and benefits.

Benefits

Employer-covered health, dental, and insurance plan options
Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics
Whole-self care through wellness partnerships
Hybrid work, in office meals, and work together days
16 weeks 100% paid parental leave and new parent stipend (for Mavens who’ve been with us for 1 year+)
Annual professional development stipend and access to a personal career coach through Maven for Mavens
401K matching for US-based employees, with immediate vesting

Work model and location

Maven embraces a flexible hybrid work model.
Teams primarily operate from the New York Metropolitan area, NY, and remotely via San Francisco/Bay Area, CA, Seattle, WA.
For New York City office: onsite three days a week (Tuesday, Wednesday, Thursday).
For Boston, DC, Chicago, Seattle, and San Francisco: monthly Work Together Days within these cities.
Location for this role: San Francisco, CA (hybrid).

View full job page →

1mo ago

Application Security Engineer, Privacy

Meta Menlo Park, CA

Menlo Park, CA

1mo ago Closed

$154k - $217k/yr Full time Ai Security Application Security Incident Response

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

Meta’s Privacy Engineering team is looking for an Application Security Engineer, Privacy to help identify and remediate privacy vulnerabilities across products and infrastructure. In this role, you will support incident triage, partner with engineers on remediation efforts, and use what you learn from incidents to improve how privacy issues are discovered and prevented. You will also help build AI agents and agent pipelines aimed at finding, stopping, and remediating privacy vulnerabilities at scale.

Key Responsibilities

Incident triage and fact identification: bring in the right stakeholders to understand what happened and assess impact.
Mitigation and remediation: follow the facts uncovered during triage to reduce risk and remediate the vulnerability.
Root cause and documentation: review and understand incidents to ensure root cause and contributing factors are identified, documented, and remediated.
Continuous learning: apply technical expertise to ensure Meta learns from each incident so issues do not resurface.
AI agent development: build AI agents and agent pipelines to help discover, prevent, and remediate privacy issues across Meta products.

Qualifications

Education: B.S. or M.S. in Computer Science (or related field), or equivalent work experience.
Experience: 5+ years in technical privacy or security engineering domains, including incident response, application privacy/security, and/or offensive security.
Programming: 5+ years coding in Python, PHP, Java, and/or C/C++ (or equivalent language), including code maintenance and review.
Threat remediation: experience identifying, analyzing, and remediating real-world privacy/security threats.

Technologies

Python
PHP
Java
C/C++

Preferred Qualifications

7+ years in technical privacy or security engineering domains, including incident response, application privacy/security, and/or offensive security.
Demonstrated ability to integrate AI tools to optimize or redesign workflows and drive measurable impact (for example, efficiency gains and quality improvements).
Technical contributions to the privacy or security community, such as public research, blogging, or presentations.
Experience in corporate environments communicating technical issues and their business implications.
Experience adhering to and implementing responsible, ethical AI practices, including risk assessment, bias mitigation, and quality and accuracy reviews.
Ongoing AI skill development, including prompt/context engineering and agent orchestration, and staying current with emerging AI technologies.
Technical experience across other Privacy or Security disciplines, such as Application Security or Privacy.

Compensation and Location

Location: Menlo Park, CA (onsite)
Salary: USD 154,000 - 217,000 per year + bonus + equity + benefits

Meta is an Equal Employment Opportunity and Affirmative Action employer. Meta does not discriminate based on race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Meta also considers qualified applicants with criminal histories in accordance with applicable federal, state, and local law. Meta participates in the E-Verify program in certain locations as required by law. Meta may use artificial intelligence and machine learning technologies in connection with applications for employment.

Reasonable accommodations: Meta is committed to providing reasonable accommodations for candidates with disabilities in its recruiting process. If you need assistance or accommodations due to a disability, contact accommodations-ext@meta.com.

Compensation note: The compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include individual compensation, which is determined by skills, qualifications, experience, and location.

View full job page →

1mo ago

Senior Security Engineer - Digital Forensics and Incident Response (DFIR)

Intuit Frisco, TX

Frisco, TX

1mo ago Closed

Full time Agent Ai Security Cloud Platforms

This position is no longer accepting applications (closed Oct 18, 2026).

Job Description

Intuit’s Digital Forensics and Incident Response (DFIR) team within the Security Operations Center (SOC) is hiring a Senior Security Engineer to drive investigations, detection improvements, and emerging AI/agentic risk response.

Responsibilities

Oversee and promptly respond to escalated security events or investigations; activate the Security Incident Response Plan when required.
Provide on-call support for critical severity issues, coordinate communications, and report incident status to the appropriate stakeholders.
Lead forensic analysis to determine root cause, scope, and impact of security incidents.
Investigate and respond to incidents involving AI/LLM-based tools and agentic platforms, including data leakage, insecure output handling, and unauthorized model access.
Extend incident response playbooks to cover generative AI and AI SOC platform risks.
Develop, maintain, and improve incident response plans, procedures, and playbooks to enable swift action and support regulatory compliance.
Use AI SOC platforms and frontier AI tools to accelerate triage, detection tuning, investigation, and documentation, and evaluate new AI capabilities during onboarding.
Provide guidance and training on security best practices and incident response to organizational partners, aligned with business objectives and compliance requirements.
Mentor and train incident responders on incident handling, forensic analysis, and cloud security forensics best practices.
Collaborate with Compliance, Legal, and Risk teams to integrate incident response operations with business and regulatory needs.
Assess vulnerabilities, propose remediation strategies, and stay current on emerging security trends, threats, and countermeasures.

Requirements

3-5 years of experience in a dedicated cybersecurity role with strong emphasis on digital forensics and incident response.
Bachelor’s degree or higher in Technology, Computer Science, Cybersecurity, or related field, or equivalent hands-on experience (preferred).
1-3 years writing scripts or code in Bash, PowerShell, or Python to automate security work.
Comfort using AI coding assistants and AI SOC platforms to build faster, with awareness of risks introduced by AI-generated code.
Working knowledge of AI/LLM security risks and mitigations, including data exfiltration, insecure output handling, model and data supply chain risk, and shadow AI usage.
Familiarity with frameworks such as OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF.
Experience performing analysis and detection engineering using Endpoint Detection and Response or Cloud Security Posture Management tools such as CrowdStrike Falcon and Wiz.
Proven threat hunting experience using hypothesis-driven hunts across endpoint, cloud, and network telemetry to uncover threats that evade existing detections.
Comprehensive understanding of cybersecurity, networking, and cloud fundamentals, including frameworks such as OWASP, MITRE ATT&CK, NIST, and CIS.
Experience using and defending public cloud services: AWS, Azure, and GCP (IAM, CI/CD Pipelines, Network Security, DLP).
Deep understanding of SIEM solutions such as Splunk and LogScale.
Strong analytical and problem-solving skills focused on root cause identification and assessing risk exposure.
Exceptional communication skills (verbal and written) to explain technical details to non-technical audiences and support stakeholder relationships.
Self-motivated and able to work autonomously, managing tasks effectively and seeking assistance when necessary.
Ability to work under pressure in a dynamic environment, prioritizing tasks to meet tight deadlines while maintaining procedural discipline.
Proficiency in digital forensics technologies and methodologies, and expertise in the Security Incident Response Lifecycle based on frameworks like NIST or SANS.
Adaptable and proactive approach with willingness to take on varied responsibilities and continuously learn.
Industry-recognized certifications (advantageous), such as AWS Security Specialty, GCIH, GCFA, GFCE, CISSP, or emerging AI security credentials.

Technologies

Bash
PowerShell
Python
AWS Security Specialty
GCIH
GCFA
GFCE
CISSP
AWS
Azure
GCP
IAM
CI/CD Pipelines
Network Security
DLP
CrowdStrike Falcon
Wiz
Splunk
LogScale
Security Information and Event Management (SIEM)
Endpoint Detection and Response
Cloud Security Posture Management
OWASP Top 10 for LLM Applications
MITRE ATLAS
NIST AI RMF
OWASP
MITRE ATT&CK
NIST
CIS
SANS
AI coding assistants
AI SOC platforms
frontier AI tools

Location

Frisco, TX (onsite)

Compensation and Benefits

May be eligible for a cash bonus, equity rewards, and benefits in accordance with applicable plans and programs.

View full job page →

Security Investigation Engineer Jobs

Staff Security Engineer, Detection & Response

Application Security Engineer, Privacy

Senior Security Engineer - Digital Forensics and Incident Response (DFIR)

Get Security Investigation Engineer Jobs alerts