Security Engineer II, SecOps

Company Description

Etsy is the global marketplace for unique and creative goods. We build, power, and evolve the tools and technologies that connect millions of entrepreneurs with millions of buyers around the world. As an Etsy Inc. employee whether a team member of Etsy, Reverb, or Depop, you will tackle unique, meaningful, and large-scale problems alongside passionate coworkers, all the while making a rewarding impact and Keeping Commerce Human

Job Description

What’s the role?

Etsy is seeking a Security Engineer II to join our Security Operations team. As part of the larger Security and Privacy Engineering org, this group of teams plays a pivotal role in protecting and responding to threats to our data, applications, systems, and infrastructure. Security Operations is responsible for managing our strategy, technologies, and execution of threat detection, incident response, threat intelligence, and more.  

As a member of the Security Operations team, you will be a hands-on security engineer, automating day-to-day DART tasks, writing new detection logic, and participating in incident response. You will collaborate with members of the broader security and engineering organizations to support our security efforts. 

This is a full-time position reporting to the Senior Director, Security and Privacy Engineering, and the base salary range will be 128,000 USD - 166,000 USD per year. In addition to salary, you will also be eligible for an equity package, an annual performance bonus, and competitive benefits that support you and your family as part of your total rewards package at Etsy.

For this role, we are considering candidates based in the United States. Candidates living within commutable distance of Etsy’s Brooklyn Office Hub or in the San Francisco Bay Area may be the first to be considered. For candidates within commutable distance, Etsy requires in-office attendance once or twice per week depending on your proximity to the office. Etsy offers different work modes to meet the variety of needs and preferences of our team. Learn more details about our work modes and workplace safety policies  here.

What’s this team like at Etsy?

At Etsy, we believe that code is craft, and that the work we do is part of a larger creative culture represented by the artists and designers who make Etsy such a unique marketplace. We believe that small, empowered, self-motivated teams can do big things. We measure and test our work, take advantage of our pioneering continuous deployment system, and cultivate a blameless culture based on trust and a commitment to learning. Learn more about our engineering philosophies, tools, and some of the challenges we’ve been solving on our Engineering blog: http://codeascraft.com/

What does the day-to-day look like?

• Develop and run tools to gather security telemetry data 

• Automate workflows and improve our detection and response time for security events

• Build detection rules 

• Contribute to response to security events including triage, investigations, incident command, and external reporting 

• Help improve processes, procedures, technologies, and runbooks for detection and response

• Contribute to threat hunting practices with Security Operations team

• Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Etsy's discretion, or otherwise applicable with local law.

Qualifications

Qualities that will help you thrive in this role are:

• 2+ years of experience as a security engineer on a detection and response team 

• Strong foundational knowledge of information security and common attacks, tactics, techniques, and procedures 

• Familiarity with operating systems internals, malware functionality, and persistence mechanisms 

• Hands on experience with SIEM and SOAR platforms 

• Experience developing tools and automation in common programming languages

• Exposure to database technologies

• Nice to haves: 

  • Experience with major cloud service provider 

  • Container technology experience

Additional Information

What's Next