Security Engineer, Threat Hunting

Grammarly is excited to offer a remote-first hybrid working model. Team members can work primarily remotely in the United States, Canada, Ukraine, Germany, Poland, or Portugal. Conditions permitting, teams will meet in person a few weeks every quarter at one of Grammarly's hubs in San Francisco, Kyiv, New York, Vancouver, and Berlin, or in a workspace in Kraków.

We believe this balanced, flexible approach gives our team members the best of both worlds: plenty of focus time along with in-person collaboration that fosters trust, unlocks creativity, and further fuels innovation.

Grammarly team members in this role must be based in the United States or Canada.

The opportunity

Every day, tens of millions of people and 50,000 professional teams rely on Grammarly’s AI-enabled communication assistance to hep them communicate confidently and achieve their goals. Our team members have the autonomy to take on exciting challenges in pursuit of our mission to improve lives by improving communication. Together, we’re building on more than a decade of steady growth and profitability. We’re defining the communication assistance category for individuals, enterprises, and developers with tailored service offerings: Grammarly Premium, Grammarly Business, Grammarly for Education, and Grammarly for Developers. All of this begins with our team collaborating in an inclusive, values-driven, and learning-oriented environment.

User Trust is at the heart of everything that we do. To achieve our ambitious goals, we’re looking for a Security Engineer, Threat Hunting to join Grammarly Security. This is a unique opportunity for a hands-on technical lead to establish the threat hunting, analysis, and intelligence security practice at Grammarly, and own the vision, technical direction, and roadmap for the function globally. 

Grammarly’s security engineers have the freedom to develop practical solutions that, in turn, influence our security culture. The engineering landscape at Grammarly is complex, as we create innovative product offerings, expand to new platforms, and scale underlying cloud systems—all while strengthening and expanding our global team. Read more about our approach to security and privacy, learn more about our stack or hear from our team on our technical blog.

Your impact

As Security Engineer, Threat Hunting, you will:

• Plan and execute end-to-end threat-hunting operations across the corporate and production environment.
• Dive into threat intelligence on threat actors, their tactics, tools, and procedures, and use analytical and hands-on technical security skills to improve Grammarly's ability to prevent, detect, and respond to attempted attacks.
• Partner with offensive security on purple team operations to facilitate a realistic assessment of our environment against skilled and determined attackers.
• Partner with an incident response on investigating potential indicators of compromise and disrupting attacker operations.
• Represent Grammarly’s security engineering teams within and outside of the company.

We’re looking for someone who

• Embodies our EAGER values—is ethical, adaptable, gritty, empathetic, and remarkable.
• Is able to collaborate in person 2–4 weeks per quarter, traveling if necessary to the hub where the team is based.
• Is a security practitioner with experience with incident investigations, as well as host-based and network-based collection and detection tools such as commercial EDRs and SIEMs
• Can create a vision and technical direction for company-wide threat hunting and analysis practices.
• Builds strong relationships with peers across the company. 
• Nurtures the talent in the team and raises the technical talent bar when recruiting for their team.
• Identifies impactful and practical solutions for security, from low-hanging fruit to long-term investments.

Support for you, professionally and personally

• Professional growth: We believe that autonomy and trust are key to empowering our team members to do their best, most innovative