What are the responsibilities and job description for the Staff Engineer position at magnit-airbnb?
Airbnb was born in 2007 when two Hosts welcomed three guests to their San Francisco home, and has since grown to over 4 million Hosts who have welcomed more than 1 billion guest arrivals in more than 100, 000 cities and towns located in 220 countries and regions across the globe. Every day, Hosts offer unique stays and one-of-a-kind activities that make it possible for guests to experience the world in a more authentic, connected way.
Airbnb was born with a creative spirit, and it’s one of the most defining parts of our culture. We use our curiosity and imagination to come up with unconventional solutions. These are the ideas at the core of Airbnb:
Our community is based on connection and belonging.
Our creativity allows us to imagine new possibilities for people.
Our responsibility is to all of our stakeholders.
It takes a unified team committed to our core values to embody these ideas, and our fast-moving team is committed to leading as a 21st century company
What is a Security Engineer, Insider Threat Detection at Airbnb?
The Threat Detection and Response Team (TDR) at Airbnb is focused on automating security detection, responding to security incidents, and working with partner teams to build capabilities that support the security incident response lifecycle. This is the front-line team that detects, investigates, and responds to security threats and malicious activity against Airbnb’s data, systems and infrastructure.
To further increase our coverage, the team is looking to build a mature and world-class insider threat program. This is a key role to implement and execute our vision for insider threat detection capabilities while working closely with other team members. As a security engineer, you will have direct impact building capabilities for a new program through influence and technical contributions.
Responsibilities:
Identify gaps in our infrastructure, and work with business partners to gain visibility through logging and detection.
Be part of the on-call rotation to provide 24/7 coverage for threat detection and incident response.
Use your coding, data analytics and investigation skills to hunt, detect and respond to insider threats.
Write detection to detect data abuse and data exfiltration at scale.
Build automation and detection models to support identification of anomalous activity and response activities to mitigate insider threats at scale.
Hunt for insider threats in our corporate and production environments to proactively identify anomalous activity.
Work side by side with our engineering teams to build advanced detection solutions to help keep systems and information safe, and partner closely with our Human Resources and Legal teams to carry out complex investigations.
Identify and consult on the design of countermeasures to mitigate insider threats in our environment.
Partner with stakeholders to contribute to Security Awareness messaging and Training.
Participate in incident response activities and provide expertise during Insider Threat incidents.
Minimum Requirements:
5 years of hands-on in-depth knowledge and technical experience in security operations including detection engineering, threat hunting, incident response, digital forensics, and/or threat intelligence.
Bachelor's degree in a related technical field or equivalent practical experience.
Exposure to data science and analytics solutions applicable to the insider threat detection space.
Experience with Insider Threat technologies (Data Loss Prevention solutions, UEBA, ).
Foundational understanding of the relationship between insider threat and Incident Response, including how to effectively coordinate responses to insider threat incidents.
Mid-level knowledge of insider threats within B2C companies, with a focus on security challenges specific to this industry.
Knowledge and familiarity of the Cyber Kill Chain Framework and MITRE ATT&CK Framework and how these apply to the insider threat landscape.
Experience automating security detection and response.
Experience in AWS services (EC2, S3, Lambda, RDS) preferred
We are not focused on specific tools but we often use Python, AWS, SQL, and more.
Self-motivated and creative problem-solver able to work independently with minimal guidance.
Ability to work calmly and collaboratively in critical high-stress situations with expediency.
Outstanding organizational, prioritization, and multitasking skills.
Hourly Pay Rate Range (dependent on location, experience, expectation)
The pay range that Magnit reasonably expects to pay for this position is: $ 130-148/hr
Benefits: Medical, Dental, Vision, 401K (provided minimum eligibility hours are met)
All qualified applicants will not be discriminated against and will receive consideration for employment without regard to protected veteran status, disability, race, color, religion, sex, age, sexual orientation, gender identity or national origin.
Salary : $130 - $148