Senior Security Engineer, Threat Detection & Incident Response

Airbnb
London, United Kingdom
On-site

Who this role is best for

Geared toward candidates with hands-on security operations experience and a creative problem-solving mindset, comfortable with threat hunting and incident response in a collaborative, high-impact environment.

Best fit for

  • Candidates with 5+ years in security operations and a track record in threat hunting and incident response
    — “5+ years of hands-on in-depth knowledge and technical experience in security operations including investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, and/or detection engineering.”
  • Individuals who can lead through influence and collaborate effectively with Legal, Privacy, and Engineering teams
    — “Ability to lead people in complex, ambiguous situations through influence and not authority.”
  • Professionals skilled in building automation and detection models using Python and SQL
    — “Proficiency in Python or other scripting language. We also use SQL and Pandas frequently.”

Things to consider

  • The role may require direct on-site presence in London due to collaboration with internal teams.
    — “The actual base pay is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands.”
  • Candidates must be prepared to work in high-stress situations with a need for calm and expediency.
    — “Ability to work calmly and collaboratively in critical high-stress situations with expediency.”

How to stand out

  • Highlight experience in building scalable threat detection models and automation tools.
    — “Build automation and detection models to support identification of anomalous activity and response activities to mitigate threats at scale.”
  • Emphasize your ability to lead and mentor others in ambiguous environments.
    — “This is a key role to help define and execute our vision for threat detection and incident response capabilities and process while mentoring other team members.”
  • Showcase your familiarity with frameworks like Cyber Kill Chain and MITRE ATT&CK.
    — “Knowledge and familiarity of the Cyber Kill Chain Framework and MITRE ATT&CK Framework and how these apply to the threat landscape.”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Perform investigations of security incidents
  • Build automation and detection models
  • Hunt for threats
  • Work with engineering teams to build advanced detection solutions
  • Identify gaps in infrastructure
Typical background
5+ years of hands-on experience in security operations

Skills & requirements

Required

Security OperationsIncident ResponseDigital ForensicsData AnalyticsPythonSQLPandasElasticsearch

Preferred

AWS Services (ec2, S3, Lambda, RDS)

Stack & domain

PythonSQLPandasElasticsearchAWS ServicesDigital ForensicsData AnalyticsThreat HuntingDetection EngineeringSecurity OperationsIncident ResponseThreat Intelligence

About the role

Original posting from Airbnb

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way.

The Community You Will Join:

The Threat Detection and Response team (TDR) at Airbnb is focused on automating security detection, responding to security incidents, and working with partner teams to build capabilities that support the incident lifecycle. This is the front-line team that detects, investigates, and responds to internal & external security threats and malicious activity.

This is a key role to help define and execute our vision for threat detection and incident response capabilities and process while mentoring other team members. As a senior engineer on the team, you will have direct impact building, optimizing, and growing securing capabilities as you help deliver world-class threat detection and incident response.

The Difference You Will Make:

You will be a key member of our growing Threat Detection & Response (TDR) team.

You will get an opportunity to define and execute on novel approaches to detecting, containing and mitigating threats and incidents.

You will partner with cross-functional partners across the company to improve the overall security of Airbnb driven by learnings and root cause analysis of investigations and incidents resulting in removal of entire classes of problems.

A Typical Day: 

Perform investigations of security incidents using your knowledge of digital forensics and data analytics.

Use your coding, data analytics and investigation skills to hunt, detect and respond to threats.

Build automation and detection models to support identification of anomalous activity and response activities to mitigate threats at scale.

Hunt for threats in our corporate and production environments to proactively identify anomalous activity.

Work side by side with our engineering teams to build advanced detection solutions to help keep systems and information safe, and partner closely with partner teams to carry out complex investigations.

Identify gaps in our infrastructure, and work with business partners to gain visibility through logging and detection.

Collaborate well with cross-functional partner teams, such as Legal, Privacy, and Engineering for efficient, large-scale response.

Your Expertise:

5+ years of hands-on in-depth knowledge and technical experience in security operations including investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, and/or detection engineering.

Proficiency in Python or other scripting language. We also use SQL and Pandas frequently.

Familiarity with Elasticsearch is preferred.

Self-motivated and creative problem-solver able to work independently with minimal guidance.

Ability to lead people in complex, ambiguous situations through influence and not authority.

Ability to work calmly and collaboratively in critical high-stress situations with expediency.  

Outstanding organizational, prioritization, and multitasking skills.

Knowledge and familiarity of the Cyber Kill Chain Framework and MITRE ATT&CK Framework and how these apply to the threat landscape.

Experience automating security detection and response.

Experience in AWS services (EC2, S3, Lambda, RDS) preferred

We are not focused on specific tools but we often use Python, AWS, SQL, and more.

Our Commitment To Inclusion & Belonging:

Airbnb is committed to working with the broadest talent pool possible. We believe diverse ideas foster innovation and engagement, and allow us to attract creatively-led people, and to develop the best products, services and solutions. All qualified individuals are encouraged to apply.

We strive to also provide a disability inclusive application and interview process. If you are a candidate with a disability and require reasonable accommodation in order to submit an application, please contact us at: reasonableaccommodations@airbnb.com. Please include your full name, the role you’re applying for and the accommodation necessary to assist you with the recruiting process. 

We ask that you only reach out to us if you are a candidate whose disability prevents you from being able to complete our online application.

How We'll Take Care of You:

Our job titles may span more than one career level. The actual base pay is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range shown below is annualized, is subject to change and may be modified in the future. This role may also be eligible for bonus, equity, benefits, and Employee Travel Credits.

United Kingdom Annual Pay Range£96,000—£120,000 GBP 

Reasonable Accommodations: We are committed to providing reasonable accommodations throughout the recruitment process for applicants with disabilities. If you need assistance, or an accommodation, please let your recruiter know once you are contacted about a role.

A Note on Recruiting Scams: Scammers sometimes pose as Airbnb recruiters to get money or personal information from candidates. A few things that will always be true for Airbnb’s hiring process: our open roles are posted on Airbnb’s Career’s Page at careers.airbnb.com, and our recruiters correspond only from @airbnb.com or @ext.airbnb.com email addresses. Our recruiters will never ask for your Social Security number, bank account details, passport, or payment app information while you are interviewing.  We’ll also never ask you to pay a fee, send money, deposit or cash a check, or purchase work-related equipment (such as a company laptop) during the interview process. We encourage candidates to remain vigilant of these recruiting scams and not share sensitive information if you do not believe an individual is actually affiliated with Airbnb.

Source: Airbnb careers

Similar roles

More roles at Airbnb