Staff Information Security Engineer – Threat Defense, Automation
Proofpoint
full-time
Posted on:
Location Type: Hybrid
Location: Draper • California • Utah • United States
Visit company websiteExplore more
Salary
💰 $137,000 - $275,275 per year
Job Level
About the role
- Serve as a Level 3 / Staff escalation point for high-severity incidents.
- Lead investigations into APTs, ransomware, insider threats, and cloud compromises.
- Act as incident commander and coordinate response efforts.
- Participate in 24/7 on-call incident response.
- Lead threat hunting across endpoint, network, identity, and cloud.
- Operationalize threat intelligence into detections and response.
- Design and improve detections across SIEM, EDR, and SOAR.
- Automate incident triage and response workflows.
- Drive post-incident reviews and continuous improvement.
- Mentor team members and influence security strategy.
Requirements
- 12+ years in Incident Response, DFIR, Threat Hunting, or Security Operations.
- Deep expertise in incident response, threat hunting, and threat intelligence.
- Strong knowledge of MITRE ATT&CK and adversary TTPs.
- Experience with SIEM, EDR, SOAR, and cloud security.
- Scripting experience (Python, PowerShell, or Bash).
- Strong communication and leadership skills.
- US Citizen.
Benefits
- Competitive compensation
- Comprehensive benefits
- Career success on your terms
- Flexible work environment
- Annual wellness and community outreach days
- Always on recognition for your contributions
- Global collaboration and networking opportunities
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
incident responsethreat huntingthreat intelligencescriptingPythonPowerShellBashMITRE ATT&CKSIEMEDR
Soft Skills
leadershipcommunicationmentoring