Senior Security Engineer - Detection Engineering

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastly’s customers include many of the world’s most prominent companies, including Vimeo, Pinterest, The New York Times, and GitHub.

We're building a more trustworthy Internet. Come join us.

Posting Open Date: 2/21/25

Anticipated Posting Close Date*: 4/21/25

*Job posting may close early due to the volume of applicants.

Senior Security Engineer - Detection Engineering

As a Senior Security Engineer on our Detection Engineering team, you will develop detections to identify potentially malicious activity and support the investigations of security incidents across the Fastly environment. We are looking for a teammate with foundations in security engineering and experience in security incident response and detection development. In this role, you will have the opportunity to mature our detection lifecycle, develop advanced detections, build automations, and support security investigations. 

What You'll Do:

• Develop detections and other analytics to identify threats across cloud, corporate, and edge environments.
• Investigate potential security threats and support security incidents.
• Research, evaluate, implement, and maintain a variety of custom and commercial security tools, such as EDR, SOAR, and SIEM.
• Build custom tooling and automations to improve the detection lifecycle and security incident response.
• Develop and maintain incident response playbooks and other detection and response documentation.
• Conduct threat hunts to discover unknown malicious activity across our environment.
• Participate in our on-call rotations.

What We're Looking For: 

• Experience in using and maintaining Splunk for investigating threats, developing detections, normalizing data feeds, and integrating with other tools.
• Familiarity of attacker tactics, techniques, and procedures (TTPs) and investigating advanced threats.
• Proficiency in one or more general purpose programming languages such as Python, Ruby, Go, or Rust.
• Experience with at least one major public cloud infrastructure, such as Amazon Web Services (AWS) or Google Cloud Platform (GCP).
• Familiarity with modern security frameworks and best practices, such as the MITRE ATT&CK framework and NIST CSF. 
• Experience with Linux administration at scale, associated intrusion/manipulation techniques, and standard methodologies for system hardening and process isolation.

We’ll be super impressed if you have experience in any of these: 

• Published security research or have spoken at community events on threat detection or incident response.
• Developed automations or tooling to improve security operations.
• Have experience developing or deploying a detection CI/CD pipeline, including developing testing criteria and continuous validation (e.g.,  Splunk Attack Range or Atomic Red Team)
• Familiarity with content delivery networks (CDN), edge cloud platforms, or Fastly products and services.

Work Hours: 

• This position will require you to be available during core business hours and support an on-call rotation. 

Work Location(s) & Travel Requirements: 

This position is open to the following office locations:

• New York, NY
• San Francisco, CA
• Denver, CO

Fastly currently embraces a largely hybrid model for most roles which allows employees flexibility to split their time between the office and home.  

This position may require travel as required by your role or requested by your manager.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Salary: 

The estimated salary range for this position is 195,720.00 to 234,864.00. 

Starting salary may vary based on permissible, non-discriminatory factors such as experience, skills, qualifications, and location.

This role may be eligible to participate in Fastly’s equity and discretionary bonus programs.

Benefits: 

We care about you. Fastly works hard to create a positive environment for our employees,