Senior Security Engineer - Detect & Response - EU/UK

1 month, 2 weeks ago
Full-time
Lead
Cybersecurity
Marqeta

Marqeta

Marqeta is a pioneer in modern card issuing and payment solutions, offering businesses instant card issuance and payment processing through their innovative open API platform.

Diversified Financial Services
251-1K
Founded 2010

Description

  • Proactively monitor Marqeta’s environment for cyber threats and manage daily security alerts through analysis, triage, and response actions.
  • Serve as incident commander during security events and coordinate investigation and cross-functional response efforts.
  • Execute incident response activities aligned with the NIST Incident Response Lifecycle to detect, contain, eradicate, recover, and learn from incidents.
  • Maintain and improve the Cybersecurity Incident Response Plan, playbooks, runbooks, and standard operating procedures.
  • Participate in 24x7x365 on-call rotations and support post-incident reviews.
  • Research threat intelligence sources and lead hypothesis-driven threat hunting in corporate and production environments.
  • Partner with Security Engineering to tune detections, improve security monitoring, and increase detection coverage.
  • Design, develop, and maintain detections-as-code and deploy detections through CI/CD pipelines into SIEM and EDR platforms.
  • Map detection coverage to MITRE ATT&CK and help prioritize detection development based on threat intelligence and business risk.
  • Coordinate with HR, law enforcement, response retainers, cyber insurers, Fraud, Compliance, and Risk teams during relevant security events.

Requirements

  • 5+ years of hands-on experience in security operations, with strong expertise in incident response, digital forensics, and threat hunting.
  • Experience serving as an incident commander or leading incident response workstreams under pressure.
  • Strong knowledge of the NIST Incident Response Lifecycle and incident response documentation and procedures.
  • Proficiency with EDR, SIEM, and SOAR security monitoring and forensic tools.
  • Experience developing detections-as-code, including version control, CI/CD pipelines, and detection testing frameworks.
  • Working knowledge of MITRE ATT&CK and its use in assessing detection coverage and mapping threat actor TTPs.
  • Experience contributing to post-incident reviews and implementing improvements based on lessons learned.
  • Solid understanding of threat actor TTPs and the use of threat intelligence to improve detection and response.
  • Experience tuning security solutions and building automation workflows to improve monitoring and response efficiency.
  • Working knowledge of AWS cloud services and securing cloud environments.
  • Experience in payment processing, fintech, or another highly regulated environment; PCI DSS incident handling experience is a plus.
  • Ability to communicate effectively with both technical and non-technical stakeholders during incidents and investigations.
  • Proven ability to work independently and judge when to escalate or involve others.
  • Willingness to mentor junior security professionals and support their growth in incident response techniques.

Benefits

  • Premium private medical and dental coverage.
  • Generous time off program with additional floating holiday days.
  • Retirement savings program with company contribution.
  • Equity in a publicly traded company plus an Employee Stock Purchase Program.
  • Monthly stipend to support the remote work model.
  • Annual development stipend for professional growth and development.
  • Family-forming benefits and up to 20 weeks of parental leave.
  • Wellbeing programs including Modern Health and HealthKick.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Test & Evaluation Engineer, Cyber

Anduril Industries 1K-5K Aerospace & Defense

Anduril Industries is seeking a Senior Test & Evaluation Engineer to support cyber operational testing across its defense technology programs, with a focus on validating systems through simulation, test ranges, and iterative development.

C++ Cybersecurity Debian Linux MATLAB Python Ubuntu
21 minutes ago

Senior Security Engineer (Cyber Resiliency)

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a Senior Security Engineer on its Cyber Resiliency team to strengthen cloud-native information security, incident response, and compliance across the company.

Go Linux macOS Python
21 minutes ago

Senior Solutions Architect - Security Specialist

Elastic 1K-5K Internet Software & Services

Elastic is hiring a Security Specialist Solutions Architect to help customers secure data and infrastructure by designing modern SIEM and security solutions and supporting their incident response and operational efficiency.

Machine Learning SIEM SOC
51 minutes ago

Principal Forward Deployed Engineer

Okta 5K-10K Professional Services

Okta is hiring a senior technical field authority to define and drive agent identity architecture, lead the most complex customer deployments, and translate field learnings into product direction.

HIPAA OpenID Connect SAML
51 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers