marqeta-inc - Senior Security Engineer, Detection and Response

• 5+ years of hands-on experience in security operations with emphasis on Incident Response and Detection Engineering. Additional expertise in threat hunting, cyber threat intelligence, and digital forensics is preferred. • Industry certifications in Incident Response or related fields are strongly preferred, such as GCIH, GCFA, GIME, OSIR, or GEIR. • Intellectual curiosity with a passion for understanding emerging threats, analyzing attack patterns, and continuously learning about evolving security landscapes and adversary tactics. • Strong investigative instincts that compel you to dig deeper into anomalies, follow evidence trails, and reconstruct complex security incidents from fragmented data. • Commitment to proactive learning and staying ahead of evolving threats by researching emerging attack techniques and sharing insights with the security team. • Solid technical foundation in security concepts and technologies, with hands-on experience using enterprise security tools including EDR, NDR, CSPM, EASM, SIEM, SOAR, and Cloud Security platforms such as GuardDuty. • Proficiency with threat intelligence frameworks such as MITRE ATT&CK and their application in assessing detection capabilities and coverage gaps. • Expertise in developing new threat detection use cases based on security telemetry analysis, environment baselining, actionable threat intelligence, and incident response findings. • Ability to identify detection coverage gaps across global infrastructure and collaborate with stakeholders to enhance visibility through improved logging and detection content. • Strong understanding of AWS cloud services and containerization technologies. • Experience with programming languages such as Python, JavaScript, or Go • Experience with infrastructure as code tools such as Terraform. • Experience with forensic tools such as KAPE, EnCase, FTK, or Volatility. • Experience with Detections-as-Code infrastructure like Sigma, or YARA. • Experience conducting Purple Team exercises and writing reports. • Experience validating vulnerabilities or reported bugs. • Experience with Observability or SRE tools and processes. • Gunnar Poling • Typical Process: • Application submission • Recruiter phone or video call • Hiring manager video call • Virtual “Onsite” consisting of 3-5, 45 min interviews