Staff Security Engineer - Detection and Response

Staff Security Engineer - Detection and Response

Remote (US Or Canada)

Technology – Security/Full Time Remote/Remote

We all have important information we need to manage, and protecting it should be easy. Over 100,000 businesses and millions of people log in to 1Password to unlock smart, simple access to everything they care about. Our vision is to create a safer, simpler digital future for everyone, and our culture values simplicity, honesty and a human-centric approach to solving problems. Come help us unlock peace of mind so everyone can stay safer online.

At 1Password, customer privacy and security come first and foremost; this commitment informs everything we do, and the Security Team is responsible for upholding this commitment. We are a passionate team that truly cares about protecting our customers, and we’re looking for new team members that share this passion.

As a Staff Security Engineer on the Detection and Response team, you will be responsible for leading the development and implementation of strategies to detect and respond to security threats across 1Password. You will work closely with cross-functional teams to ensure the continuous improvement of our security posture and the protection of our assets against emerging threats. This role offers the opportunity to make a significant impact in safeguarding our systems and data against cyber threats.

Join us and unleash the excitement of protecting the digital world.

This is a Remote opportunity within Canada and the US.

What we're looking for:

• Minimum 7 years of experience in a security role with a focus on Detection Engineering, Incident Response, Digital Forensics and/or Threat Intelligence
• Experience leading and collaborating on complex and ambiguous cross-functional projects from design through implementation
• Expertise in leading security incidents to resolution with various incident responders and stakeholders
• Experience in building logging pipelines for log ingestion into a centralized system
• Expertise in SIEM and SOAR solutions for building behavior based detections and security automations
• Experience with Detection-as-Code to automate detection engineering workflows
• Experience with EDR, IDS/IPS and forensic analysis tools on various operating systems
• Strong understanding of current threat landscape and threat actor TTPs
• Experience with threat hunting and analyzing logs to identify potential security or privacy impacts
• Experience deploying cloud services (e.g., AWS, GCP) and a strong understanding of cloud security principles
• Proficiency in scripting and programming languages (e.g., Python, Bash) for automation and tool development
• Experience with software development lifecycle, project management, Terraform and CI/CD in GitLab or GitHub
• Excellent communication skills with a drive for collaboration and leveling up team members
• Bonus: Relevant certifications such as CEH, OSCP, GSOC, GCIH, GCDA or equivalent.

What you can expect:

• Lead the design, development, and implementation of detection and response processes for all of Security
• Operate as a technical leader by helping define the Detection and Response team roadmap through collaboration with the manager
• Define the scope, timeline, milestones and success criteria for projects, ensuring deliverables are met and in alignment with Security OKRs
• Build strong relationships with partner and stakeholder teams in order to advise on improvements to detection capabilities and response procedures
• Manage security incidents through the incident response process from identification to resolution
• Design and build systems to automate security processes and workflows to improve efficiency and scalability
• Participate in an on-call rotation with potential for work on nights or weekends in the event a significant security issue is identified
• Partner with developers, engineers and other departments to review and address security issues
• Develop and maintain threat intelligence sources to stay informed about emerging threats and attack vectors
• Write and execute response playbooks that can be utilized by all members of the team
• Mentor and train team members to uphold a high team standard
• Participate in security audits, vendor assessments and security tabletop exercises
• Be a subject matter expert on the team’s security tooling, processes and procedures

USA-based roles only: The Annual base salary for this role is between $187,000 USD and $253,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.

Canada-based roles only: The Annual base salary for this role is between $168,000 CAD and $228,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.

At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.

What we offer:

We believe in working hard, and resting hard. We’re always looking for new ways to support our team members, but here’s a glance at what we currently offer:

Health and wellbeing

> 👶 Maternity and parental leave top up programs

> 👟 Wellness spending account

> 🏝 Generous PTO policy 

> 💖 Company-wide wellness days off scheduled throughout the year 

> 🧠 Wellness Coach membership

> 🩺 Comprehensive health coverage

 Growth and future 

> 📈 Employee stock option program for all full time employees 

> 💸 Retirement matching program

> 💡 Training budget, 1Password University access, and learning sessions 

> 🔑 Free 1Password account (and friends and family discount!) 

Flexibility and community

> 🤝 Paid volunteer days 

> 🌎 Employee-led DEI&B programs and ERGs

> 🏠 Fully remote environment

> 🏆 Peer-to-peer recognition through Bonusly

You belong here.

1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.

Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at nextbit@agilebits.com and we’ll work to meet your needs.

Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this your Talent Partner would be happy to address them with you.

Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.

Candidate Privacy Notice

When you apply for a position, refer a candidate, or are being considered for a role at AgileBits, Inc. (dba 1Password, 1Password, we, us, or our), your information is stored in Lever, in accordance with Lever's Service Privacy Notice. We use this information to evaluate your candidacy for the posted position. We also store this information, and may use it in relation to future positions to which you apply, or which we believe may be relevant to you given your background.

Candidates may also optionally choose to self-identify their race/ethnicity, gender identity, sexual orientation, age, and disability. These answers will help us evaluate our diversity and belonging efforts. You do not have to answer these questions—your answers will not be linked to your name or job application, will not be visible to the hiring manager reviewing your application, and will in no way affect your job application. If you have any questions about the collection or use of this information, please contact [dpo@1password.com].

When we have no ongoing legitimate business need to process your information, we will either delete or anonymize it. If you have any questions about how we use or process your information, or if you would like to ask to access, correct, or delete your information, please contact our privacy team at [dpo@1password.com] or through 1Password Support.