Security Engineer

Five9 is a leading provider of cloud contact center software. The company is seeking a Security Engineer to own incident response, detection engineering, response automation, threat intelligence, threat hunting, and AI-assisted development for its security triage pipeline.

Responsibilities:

• Incident response. Own incidents end to end: scoping, containment, forensics, write-up, and remediation follow-through
• Detection engineering. Write, tune, test, and retire detections. Detection content is version controlled, reviewed, and measured on outcomes rather than alert volume
• IR automation. Build playbooks, integrations, and workflows that remove repeated manual steps from the response process. This is a large part of the role
• Threat intelligence. Track activity relevant to our environment and convert it into detections, hunts, and hardening work
• Threat hunting. Be a contributor to our hypothesis-led threat hunting initiatives
• AI-assisted development. Build and improve the agents, prompts, and enrichment logic behind the triage pipeline
• Alert triage. A limited amount: escalations the pipeline surfaces, plus the feedback that improves it

Requirements:

• Hands-on security operations experience, including incidents you can walk through in detail
• Proficiency in at least one scripting language (Python or equivalent) and a preference for solving recurring problems with code
• Working knowledge of detection logic, log pipelines, and modern telemetry sources: EDR, identity, cloud, network, and SaaS
• Ability to take an ambiguous problem, define what done looks like, build it
• Clear written communication: incident timelines, design notes, and postmortems
• GCP and/or AWS experience, including cloud logging, IAM, and cloud-specific failure modes
• Low-code automation platforms such as Tines or n8n, and judgment about when a workflow should become production code
• Agent programming and prompt engineering, specifically LLM tooling reliable enough for operational use
• Experience with AI-enriched detection or triage pipelines