Senior Engineer, Automation Incident Detection & Response

From Fivetran's founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We're proud that more organizations continue to leverage our technology every day to become truly data-driven.

About the Role

Fivetran is building data pipelines to power the modern data stack for thousands of companies.

We're looking for a highly skilled and execution-focused Senior Security Engineer to join our Incident Detection and Response Team, concentrating on enhancing our detection and response capabilities through robust automation. This individual contributor (IC) role is deeply hands-on, demanding expertise in security automation, cloud security, and development practices. You will play a key role in developing and enhancing automated security workflows, integrating security into our threat detection and response processes, and ensuring Fivetran maintains a proactive stance against emerging threats. You will collaborate across multiple teams throughout Fivetran, including platform security, SRE, and engineering, to automate security operations and enhance our incident response efficiency.

This is a full-time, hybrid position based out of our Denver, CO or Oakland, CA offices.

Technologies You'll Use

Scripting Languages (Python, Go, Bash), Java, IaC(Terraform), Github, Docker, Kubernetes, Cloud Platform(AWS, GCP & Azure), Container Technology (Docker, Kubernetes).

What You'll Do

• Optimize and Expand the Automation Capabilities of Our Incident Response Framework: Design and implement enhancements to our existing framework, ensuring scalability and comprehensive automated security operations by refining data flow, integration points, and decision-making logic.
• Automate Incident Workflows for Rapid Response: Automate alert triage, enrichment, investigation, and remediation, seamlessly integrating with SIEM, SOAR, EDR, and other security platforms to enable efficient data sharing and workflow orchestration.
• Develop Advanced, Event-Driven Automation: Create dynamic workflows that adapt to various incident scenarios, triggering automated actions based on real-time events and conditional logic to drastically reduce incident response times.
• Proactively Mitigate Risks Through Automation: Focus on automated remediation and containment strategies by automating vulnerability scanning, patching, and configuration checks, utilizing threat intelligence to block malicious activity, and automatically isolating compromised systems, blocking malicious traffic, and disabling compromised accounts.
• Drive Continuous Improvement Through Post-Incident Analysis: Analyze incident data to identify patterns, trends, and root causes, evaluating the effectiveness of automated processes and identifying areas for improvement to ensure the incident response process remains efficient and effective.
• Enhance Security Assessment Tools and Processes: Enhance security assessment tools and processes, including penetration testing, vulnerability scanning, SIEM, DLP, and EDR.
• Stay Ahead of the Threat Landscape: Stay up to date with cybersecurity threats, trends, and industry standards to ensure Fivetran remains resilient against emerging risks.

Skills We're Looking For

• Incident Response Expertise: Proven experience in handling and managing security incidents across diverse environments.
• Cloud-Native Security: Demonstrated experience securing cloud-native applications and deployments (AWS, GCP, Azure).
• Cloud Container Security Expertise: Deep understanding of securing containerized applications and Kubernetes deployments.
• Security Automation: Experience designing and implementing automated security workflows.
• Scripting Proficiency: Proficiency in scripting languages (Python, Bash, Go) for automation.
• Security Tooling Proficiency: Familiarity with SIEM, SOAR, EDR, and vulnerability scanners.
• Threat Detection & Analysis: Ability to analyze security logs, identify malicious activity, and conduct threat investigations.
• Clear Communication: Ability to explain complex security concepts to technical and non-technical audiences.
• Attack & Defense Knowledge: Understanding of modern attack techniques and effective defense strategies.
• Analytical Problem Solving: Ability to analyze security issues, identify root causes, and troubleshoot effectively.
• Collaborative Teamwork: Ability to work effectively independently and within a team.

#LI-MM1

The pay range displayed on this job posting reflects the minimum and maximum target for new hire salaries for the target position and level. Our pay ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The pay range is subject to change and may be modified in the future. Your recruiter can share more about the specific pay range for your location during the hiring process.

Pay Range

$203,013-$253,766.25 USD

Perks and Benefits

• 100% employer-paid medical insurance*
• Generous paid time-off policy (PTO), plus paid sick time, inclusive parental leave policy, holidays, and volunteer days off
• RSU stock grants*
• Professional development and training opportunities
• Company virtual happy hours, free food, and fun team-building activities
• Monthly cell phone stipend
• Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents.

*May vary by country and worker type - please reach out to your recruiter for more information

Click here to learn more about Fivetran's Benefits by Region.

We're honored to be valued at over $5.6 billion, but more importantly, we're proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream. Read about us in Forbes.

Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities.

To learn more about Fivetran's culture and what it's like to be part of the team, click here and enjoy our video.

To learn more about our candidate privacy policy, you can read our statement here.

We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form. We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.