Security Engineer - Detection & Response

xAI is focused on creating AI systems that enhance human understanding and knowledge. The role involves leading security threat management, identifying potential incidents, and supporting threat hunting and incident response efforts to uphold best practices.

Responsibilities:

• Drive continual improvement in processes, procedures and automations to improve the quality and effectiveness of the team
• Participate in a 24/7 on-call rotation performing security incident response
• Commandeering security incidents and updating stakeholders
• Identify and develop new detection use cases and optimize existing detections
• Collaborate on technical directions and solutions with other teams
• Research and analyze patterns in security events across X’s global infrastructure
• Identify, design, and lead threat hunting missions to quantify and reduce threats
• Manage and support the log collection, security scanning, intrusion detection, and other security-related systems
• Design and assist in the development of automation to reduce false positives and handle events automatically
• Analyze the security posture of systems via testing and vulnerability impact analysis

Requirements:

• 2+ years of relevant information security experience
• Self starter, can receive a task and execute with minimal supervision
• Strong Python scripting skills for implementing security automation
• Knowledge of networking and macOS, Windows or Linux operating systems
• Knowledge of cloud security fundamentals and practices (vendor agnostic)
• Experience managing and/or deploying security technology
• Experience with building queries and dashboards for security monitoring
• Knowledge of current threats and techniques and a desire to research and learn more
• Experience with malware analysis, forensics or penetration testing
• Problem solving skills or experience with troubleshooting
• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar preferred
• Drive continual improvement in processes, procedures and automations to improve the quality and effectiveness of the team
• Participate in a 24/7 on-call rotation performing security incident response
• Commandeering security incidents and updating stakeholders
• Identify and develop new detection use cases and optimize existing detections
• Collaborate on technical directions and solutions with other teams
• Research and analyze patterns in security events across X's global infrastructure
• Identify, design, and lead threat hunting missions to quantify and reduce threats
• Manage and support the log collection, security scanning, intrusion detection, and other security-related systems
• Design and assist in the development of automation to reduce false positives and handle events automatically
• Analyze the security posture of systems via testing and vulnerability impact analysis
• Elastic / OpenSearch or similar platforms
• Open Source security automation tooling