Senior Security Engineer, Detection & Response

Block

. Command complex, high-impact security incidents from initial assessment through containment, recovery, and closure .

Posted 11/4/2026full-timeRemote • California • United StatesSenior💰 $185,200 - $326,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in incident response and digital forensics, with a strong focus on security incident management, evidence preservation, and effective communication across technical and business teams. Proficient in developing AI-assisted workflows and tools to enhance incident coordination and case management.

Highest-signal resume keywords

Incident Response ManagementDigital Forensics ExpertiseSQL/Database ProficiencyPython ProgrammingAI-Based System Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident CommandThreat InvestigationEvidence PreservationLog AnalysisData AnalysisAutomation ScriptingSecurity Incident CoordinationIncident Timeline ReconstructionPost-Incident ReviewAI-Assisted Workflow Development

Soft Skills

Clear CommunicationSound JudgmentMentoringCollaborationDecision-Making

Industry Keywords

Endpoint SecurityIdentity SecurityCloud SecurityNetwork SecurityApplication SecurityThreat IntelligenceIncident Response On-Call RotationCompeting Priorities ManagementTechnical Team CollaborationBusiness Impact Assessment

Tech Stack

Tools & technologies

CloudPythonSQL

About the role

Key responsibilities & impact

Command complex, high-impact security incidents from initial assessment through containment, recovery, and closure
Investigate threats across endpoint, identity, cloud, SaaS, network, and application systems
Drive containment and remediation with system owners while balancing urgency, evidence preservation, and business impact
Reconstruct timelines, preserve evidence, and determine incident scope and impact
Keep incident priorities, decisions, owners, and handoffs clear across teams and time zones
Lead post-incident reviews and communicate findings, uncertainty, and response decisions to technical teams and business partners
Write code, queries, and automation to accelerate evidence collection, analysis, and response
Partner with triage, detection, threat intelligence, and infrastructure teams to address missing telemetry, improve detections, and remove recurring manual work
Mentor responders
Participate in the incident response on-call rotation

Requirements

What you’ll need

6+ years of hands-on incident response and digital forensics experience
Experience commanding major security incidents involving multiple teams and competing priorities
Strong knowledge of attacker behavior
Depth in several areas of identity, endpoint, cloud, network, or application security
Strong SQL/database understanding and log-analysis skills
Practical programming or scripting ability, such as Python
Ability to analyze large, messy datasets and build reliable tools, with and without AI
Established AI-assisted workflow
Experience developing AI-based systems and processes that improve incident coordination and case management
Clear communication and sound judgment when working with technical teams, executives, and sensitive information
Engineering mindset and track record of turning incident response lessons into lasting improvements
Ability and willingness to develop systems and workflows that improve incident response and connect with investigation, automation, and case management capabilities
Participation in the incident response on-call rotation

Benefits

Comp & perks

Remote work
Medical insurance
Flexible time off
Retirement savings plans
Modern family planning