Security Engineer II, Detection and Response

Circle is one of the world’s leading internet financial platform companies, building the foundation of a more open, global economy through digital assets and payment applications. As a Security Engineer II, Detection and Response, you will lead projects to protect Circle and its stakeholders by identifying and responding to security threats, managing security tools, and developing detection techniques.

Responsibilities:

• Proactively identify and respond to emerging security threats
• Advance deployment of AI to SOC function
• Help manage core tooling, such as SIEM and Orchestration platforms
• Identify gaps in our infrastructure, and work with business partners to gain visibility through logging and detection
• Respond to incidents and collaborate across teams to investigate and resolve
• Develop detection techniques to identify anomalous behaviors and attacks across the environment
• Support broader security team projects such as threat modeling, vulnerability scanning, audits, and custom tool building
• Take on-call shifts

Requirements:

• 2+ years of experience in detection, response, or security engineering
• Experience working security incidents, especially those involving engineering
• Experience working in an AWS + EKS environment required
• Hands-on experience using AI tooling both to accelerate work and to address threats, coupled with a strong understanding of the organizational risks AI introduces and strategies to defend against them
• Knowledge of operating systems, file systems, and memory on MacOS
• Programming experience in Python, Golang, or similar programming languages
• Strong ability to work collaboratively across teams during high-stress situations, which sometimes involves after hours work
• Ability to manage multiple competing priorities and use good judgment to establish order of priorities on the fly
• Self-motivated and creative problem-solver able to work independently with minimal guidance
• Experience/familiarity with Slack, Apple MacOS, and GSuite
• Professional or hobbyist blockchain exposure is preferred