Senior/Staff Detection and Incident Response Engineer

The Opportunity

This is a Senior or Staff level role owning detection and incident response at Grow. The core of the job is: catching threats early through strong detection engineering, moving fast on unfamiliar systems when something does happen, and having a real point of view on where the architecture is exposed before it becomes a problem. It's cross functional by design, working closely with infrastructure, engineering, and compliance.

What You'll Be Doing

• Share security judgment and standards with teams across the company, raising the bar beyond the security org itself
• Investigate and resolve security incidents across endpoint, network, and cloud, understanding unfamiliar systems well enough to respond with confidence
• Research the threats and attack methods most relevant to a healthcare marketplace, and use that intelligence to get ahead of them
• Build and mature Grow's detection and response program, and participate in an incident on call rotation
• Strengthen our cloud security posture in partnership with infrastructure, engineering, and compliance
• Build defense in depth through secure by default architecture and processes, thinking through the full lifecycle of a problem rather than just patching the immediate risk
• Design new, creative approaches to catching threats early, not just tuning what already exists

You'll Be a Good Fit If

• You have 6+ years of experience in detection and incident response
• You have real depth in AWS security: IAM, secure service configuration, CloudTrail, SCPs, AWS Organizations, Config, and the like
• You have deep expertise responding to complex incidents and a strong grasp of detection engineering, including SIEM, EDR, and CSPM tooling
• You care about how security work lands on the people around you, from customers whose data you protect to the engineers you partner with
• You write code to automate the tedious parts of the job, and you're comfortable with infrastructure as code
• You collaborate well, both within a security team and across engineering more broadly
• You think about the whole solution, not just the technology, and can weigh competing design choices with real conviction
• You understand the current threat landscape and know how to assess risk against it

Employment Type: Full Time, Exempt

Base Compensation: The base compensation range for this position is:

• Hybrid Commitment: $217,000–$288,000 USD Annually
• Fully Remote Commitment: $182,000- $240,000 USD Annually

This role can be hybrid (onsite from our NYC, San Francisco, or Seattle hub location three days per week: Tuesday, Wednesday, Thursday) or fully remote. Both arrangements include travel 2–3 times per year (e.g., company and department offsites).

The base compensation for this role will vary depending on several factors, including relevant experience, qualifications, and the candidate’s working location.