Senior Threat Response Engineer

Red Canary, a Zscaler company, monitors an enterprise’s environment to detect and respond to cybersecurity threats so they can focus on their mission. Our Managed Detection and Response (MDR) solution is a unique blend of human expertise and security, which protects organizations from modern adversaries as their teams work remotely, move to the cloud, and they adopt new cybersecurity and IT technologies.

Role

We are looking for an experienced Senior Threat Response Engineer to join our Active Remediation team. This is a remote role, reporting to the Senior Manager, Threat Response Engineering. You will be on the front lines, acting as the virtual boots on the ground for our customers to respond to and remediate threats. By driving investigations using EDR and Identity telemetry, you will perform behavioral analysis and threat hunting while leveraging our platform to maximize efficiency and minimize customer vulnerability.

What you’ll do (Role Expectations)

• Perform investigations into detected threats and use customers’ security products to analyze, contain, and remediate threats in their environments

• Provide customers with thorough reports of actions taken to ensure they understand environment cleanup and protection strategies

• Identify effective response strategies to further enhance the overall security posture for our customers

• Collaborate with Detection Engineering, Threat Hunting, Intel, and Product Management teams to develop new ways of performing timely remediation

• Lead team projects and mentor peers while providing strategic insights and operational support for product improvement

Who You Are (Success Profile)

• You thrive in ambiguity. You're comfortable building the path as you walk it. You thrive in a dynamic environment, seeing ambiguity not as a hindrance, but as the raw material to build something meaningful.

• You act like an owner. Your passion for the mission fuels your bias for action. You operate with integrity because you genuinely care about the outcome. True ownership involves leveraging dynamic range: the ability to navigate seamlessly between high-level strategy and hands-on execution.

• You are a problem-solver. You love running towards the challenges because you are laser-focused on finding the solution, knowing that solving the hard problems delivers the biggest impact.

• You are a high-trust collaborator. You are ambitious for the team, not just yourself. You embrace our challenge culture by giving and receiving ongoing feedback—knowing that candor delivered with clarity and respect is the truest form of teamwork and the fastest way to earn trust.

• You are a learner. You have a true growth mindset and are obsessed with your own development, actively seeking feedback to become a better partner and a stronger teammate. You love what you do and you do it with purpose.

What We’re Looking for (Minimum Qualifications)

• Very strong analytical and problem-solving skills demonstrated through experience in responding to security events and threats

• Mastery of Endpoint Detection and Response (EDR) products including CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, Palo Alto Cortex, or CarbonBlack

• Strong experience or familiarity with Identity security products

• Deep understanding of internal system functionality for Windows and MacOS operating systems and network communication

• Professional and articulate communication skills for both written reports and verbal stakeholder engagement

• Ability to work Tuesday - Friday from 7am - 5pm MT

What Will Make You Stand Out (Preferred Qualifications)

• Strong understanding of enterprise technology, network controls, and security operations

• Proven track record of developing operational efficiencies via technology or process improvement

• Practical application of current and emerging adversary tactics and techniques to enhance defensive strategies

#LI-JG1

#LI-Remote