Detection and Response Engineer

Postman

full-time

Posted on: 9/27/2025

Location Type: Hybrid

Location: San Francisco • California • 🇺🇸 United States

✨ AI Apply

💰 $138,000 - $158,000 per year

Mid-LevelSenior

AWSCloudFirewallsJavaScriptPythonTerraform

About the role

Provide Level 2 support to a managed SOC, monitoring and analyzing security alerts and events from corporate, cloud, and production environments
Conduct threat hunting and forensic investigations to identify indicators of compromise and patterns of malicious activity
Coordinate and manage incident resolution with cross-functional teams and act as Incident Commander when required to provide 24/7 coverage
Support Cloud Detection & Response platforms to enable automated notification and containment workflows
Fine-tune and develop detection rules, configurations, automations, and custom playbooks in collaboration with the managed SOC
Write scripts and develop custom tools to automate detection and response processes, adhering to SSDLC best practices
Identify gaps in logging coverage and ensure high visibility into threats
Manage Cloudflare security products for web application security, including WAF rules and DDoS protection
Monitor security advisories, threat intelligence feeds, and vendor updates and drive remediation actions into the enterprise/product organization
Collaborate with cross-functional teams to proactively detect and respond to security threats and ensure the security of digital assets

Bachelor’s degree in Computer Science, Information Security, or a related field
Minimum of 3 years of experience in a SOC analyst or security operations role
Proficiency in programming and scripting languages such as Python, JavaScript, Bash, and PowerShell
Experience with AWS security services and best practices
Familiarity with Cloudflare, SentinelOne, Okta, and related security tools
Understanding of network protocols, firewalls, and intrusion detection systems
Strong analytical and problem-solving abilities
Excellent written and verbal communication skills
Ability to work independently and as part of a team
Preferred: Certifications such as CISSP, CEH, AWS Certified Security Specialty
Preferred: Experience with infrastructure as code tools (e.g., Terraform)
Preferred: Knowledge of DevSecOps practices and CI/CD pipelines
Preferred: Familiarity with regulatory compliance standards (e.g., GDPR, ISO 27001)
Coding requirement: Proficient in Python or JavaScript to write/maintain AWS Lambda functions and command-line scripts/utilities

Benefits

Tip: use these terms in your resume and cover letter to boost ATS matches.

PythonJavaScriptBashPowerShellAWS security servicesCloud Detection & Responsedetection rulesSSDLC best practicesinfrastructure as codeDevSecOps

analytical abilitiesproblem-solvingwritten communicationverbal communicationindependenceteam collaboration

CISSPCEHAWS Certified Security Specialty