Airbnb was born in 2007 when two Hosts welcomed three guests to their San Francisco home, and has since grown to over 4 million Hosts who have welcomed more than 1 billion guest arrivals in almost every country across the globe. Every day, Hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way.
The Community You Will Join:
The Threat Detection and Response team (TDR) at Airbnb is focused on automating security detection, responding to security incidents, and working with partner teams to build capabilities that support the incident lifecycle. This is the front-line team that detects, investigates, and responds to security threats and malicious activity.
While the team is not new, we are now at a point of increasing scope as we grow the team. This is a key role to define and execute our vision for threat detection and incident response capabilities and process while mentoring other team members. As a senior engineer on the team, you will have direct impact building, optimising, and growing securing capabilities as you help deliver world-class threat detection and incident response.
The Difference You Will Make:
- You will be a key member of our growing Threat Detection & Response (TDR) EMEA team.
- You will get an opportunity to define and execute on novel approaches to detecting, containing and mitigating threats and incidents.
- You will partner with cross-functional partners across the company to improve the overall security of Airbnb driven by learnings and root cause analysis of investigations and incidents resulting in removal of entire classes of problems.
A Typical Day:
- Investigation & Response: Lead complex security investigations, develop scalable tools, and mentor team members in forensic analysis and incident response.
- Incident Handling: Resolve critical incidents as an escalation point, conduct root cause analyses, and implement preventive measures in collaboration with cross-functional teams.
- Detection Engineering: Design and optimize advanced threat detection systems using insights from incident response and global intelligence. Promote best practices across the organization.
- Technical Leadership: Define and drive strategy for threat detection and incident response, aligning with organizational security objectives and influencing security architecture.
- Influence & Communication: Coordinate with cross-functional teams during large-scale incidents, represent security in executive discussions, and foster a culture of security awareness and improvement.
Your Expertise:
- 10+ years of hands-on technical experience in security engineering, systems engineering, software engineering, network engineering, or privacy engineering.
- 8+ of those years of experience in incident response including host and cloud forensics, incident management, threat intelligence, threat hunting, and/or security detection.
- Bachelor's degree in a related technical field or equivalent practical experience.
- Ability to lead people in complex, ambiguous situations through influence and not authority.
- Ability to work calmly and collaboratively in critical situations with expediency.
- Outstanding organisational, prioritisation, and multitasking skills.
- Experience automating security detection and response.
- We are not focused on specific tools but we often use Python, AWS, SQL, and more.
This is a remote-friendly position. However, due to certain restrictions, we can only offer this position in Germany, Ireland, and the United Kingdom.