Security Engineer – Detection & Response

Liftoff Mobile

Security Engineer enhancing detection and response capabilities for Liftoff's security team. Leading incident response and automation efforts while collaborating across engineering teams.

Posted 5/15/2026full-timeRemote • California, Colorado, Florida, Idaho, Illinois, Massachusetts, Minnesota, Missouri, Montana, Nevada, New Jersey, New York, Oregon, Texas, Utah, Washington • 🇺🇸 United StatesMid-LevelSenior💰 $172,000 - $240,000 per yearWebsite

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Own day-to-day operation of Liftoff's SIEM (Panther) — log source ingestion, detection content, and the alert investigation pipeline.
Lead Liftoff's adoption of AI-augmented SOC tooling (e.g. Prophet, Dropzone, or equivalent) as a multi-year modernization investment.
Triage incoming security alerts and drive timely investigation and remediation with stakeholders across Engineering and IT.
Lead incident response — investigation, containment, and post-incident review — and mature processes and runbooks so response becomes predictable and repeatable.
Build tooling and automation that detects active threats, enriches alerts, and reduces manual investigation toil.
Partner with Engineering and IT to make detection and response self-service where possible — clear log-onboarding paths, documented detection proposals, accessible runbooks — so security scales without becoming a bottleneck.
Close the feedback loop between the team's offensive and proactive findings and detection coverage.
Partner across the security team on cloud, infrastructure, and application security work alongside your detection and response focus — every engineer on this team covers breadth beyond their primary focus.
Participate in the Security team's on-call rotation and incident response.

Requirements

What you’ll need

5+ years in security engineering, security operations, detection engineering, or software engineering with a security focus.
Hands-on production SIEM operation — onboarding log sources, writing and maintaining detection content, and triaging alerts.
Write production-quality code for security automation and detection-as-code.
Experience leading or substantially contributing to security incident response.
Strong technical writing — design docs, runbooks, and post-incident reviews.
Demonstrated judgment in prioritizing security work using a risk-based approach.
Ability to quickly navigate large, unfamiliar codebases and reason about complex engineering systems.
Excellent verbal communication.
Willing to participate in an on-call rotation.

Benefits

Comp & perks

Medical coverage
Wellness stipends
Additional perks based on your country of residence

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SIEMlog source ingestiondetection contentalert investigationAI-augmented SOC toolingsecurity automationdetection-as-codeincident responsetechnical writingrisk-based approach

Soft Skills

communicationjudgmentcollaborationleadershipproblem-solvingorganizationadaptabilityattention to detailcritical thinkingtime management