Senior Security Engineer

GoDaddy is empowering everyday entrepreneurs around the world by providing the help and tools to succeed online. They are seeking a highly skilled Senior Security Engineer to lead complex incident response and forensic investigations while modernizing security operations through automation and AI-driven capabilities.

Responsibilities:

• Lead high-priority incident response and forensic investigations, serving as the primary escalation point for advanced analysis, containment, recovery, root cause determination, and executive-level reporting
• Drive threat detection and response across AWS, Windows, macOS, Linux, and endpoint security platforms, leveraging services such as GuardDuty, Security Hub, Detective, CloudTrail, IAM, VPC Flow Logs, and SentinelOne
• Conduct malware analysis, host and cloud forensics, evidence collection, and threat hunting activities to identify attack vectors, persistence mechanisms, and business impact while maintaining sound investigative practices
• Design and implement automated security workflows, AI-assisted playbooks, and AWS-native response capabilities to improve detection accuracy and reduce MTTD and MTTR
• Partner with Security, IT, and DevOps teams to enhance security posture, improve processes and tooling, develop detection content, and mentor junior security engineers

Requirements:

• 5+ years of cybersecurity experience, including 2+ years in senior Incident Response, Security Operations, Threat Detection, or Digital Forensics roles
• Deep expertise securing and investigating AWS environments, including IAM, CloudTrail, Config, CloudWatch, GuardDuty, Security Hub, Detective, VPC Flow Logs, S3 logging, and serverless security controls
• Experience conducting forensic investigations, evidence collection, log analysis, malware triage, and cloud-based incident investigations while maintaining chain-of-custody best practices
• Strong scripting and automation skills with Python, PowerShell, and/or Bash, including building security automations using AWS services such as Lambda, Step Functions, and EventBridge; experience applying AI and ML technologies to security operations is highly desirable
• Strong communication and investigative skills, including technical reporting, executive presentations, and preferred certifications such as AWS Security Specialty, GCIH, GCFA, GCIA, OSCP, or CISSP
• Experience with digital forensics platforms such as AXIOM, F-Response, Timesketch, Volatility, Velociraptor, or other enterprise investigation tools
• Experience with additional EDR/XDR platforms such as CrowdStrike, Microsoft Defender, or Carbon Black
• Expertise building and maintaining SOAR platforms, automated response workflows, and cloud-native security operations
• Experience with AI security technologies including Amazon Bedrock, Microsoft Security Copilot, Google SecOps/Chronicle, or open-source LLM integrations
• Familiarity with multi-account AWS environments, AWS Organizations, CSPM solutions, and cloud security frameworks such as Prowler, Trusted Advisor, or CNAPP platforms