Staff Security Engineer I, Security Operations

Company Description
Etsy is the global marketplace for unique and creative goods. We build, power, and evolve the tools and technologies that connect millions of entrepreneurs with millions of buyers around the world. As an Etsy Inc. employee, whether a team member of Etsy, Reverb, or Depop, you will tackle unique, meaningful, and large-scale problems alongside passionate coworkers, all the while making a rewarding impact and Keeping Commerce Human.

Salary Range:

$201,000.00 - $235,000.00

What’s the role?

Etsy is seeking a Staff Security Engineer to join our Security Operations team. This person will be a hands-on security engineer, automating day-to-day DART tasks, writing new detection logic, and contributing to corporate security projects and work streams. You'll collaborate with members of the broader security and engineering organizations to support our security efforts. Additionally, Providing technical mentorship to other individuals, contributing to strategic planning, and communicating (written and verbal) to a variety of audiences. Lastly, a core function of the role will be to respond to incidents as they arise, serving in an on-call capacity in rotation with several other team members.

This is a full-time position reporting to the Senior Engineering Manager - Security Operations. In addition to salary, you will also be eligible for an equity package, an annual performance bonus, and competitive benefits that support you and your family as part of your total rewards package at Etsy.

For this role, we are considering candidates based in the United States, however candidates living within commutable distance of the Etsy Brooklyn Hub, or within the San Francisco area, will be the first to be considered. Even if located within commuting distance of an office, you will have the option to work office-based, flex, or remotely. Etsy offers different work modes to meet the variety of needs and preferences of our team. Learn more about our Flex and Office-based work modes and workplace safety policies here.

What’s this team like at Etsy?

As part of the larger Security and Privacy Engineering org, this group of teams plays a pivotal role in protecting and responding to threats to our data, applications, systems, and infrastructure. Security Operations is responsible for managing our strategy, technologies, and execution of threat detection, corporate security, threat intelligence, and more.

What does the day-to-day look like?

• Participate in active threat hunting, analysis of security events, and incident triage (as it arises)

• End to end security event and/or incident response cycle duties, including but not limited to forensic analysis of full disk images and log data, incident commander duties, and multi-functional collaboration to other business areas

• Develop, tune, and manage tools to capture security telemetry data 

• Automate workflows and improve our detection and response time for security events

• Build detection rules and threat hunting queries

• Help improve processes, procedures, technologies, and runbooks for detection and response

• Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Etsy's discretion, or otherwise applicable with local law.

Qualities that will help you thrive in this role are:

• Experience as a security engineer on a detection and response team or corporate security team

• Strong foundational knowledge of information security and common attacks, tactics, techniques, and procedures 

• Familiarity with operating systems internals, malware functionality, and persistence mechanisms 

• Hands on experience with SIEM, SOAR, EDR and MDM platforms! 

• Experience developing tools and automation in common programming languages 

• Familiarity with cloud