Information Security Engineer - Threat Defense & Automation

Role Overview

We’re seeking a Staff Information Security Engineer to help lead and evolve our Global Information Security Operation. In this role, you’ll shape incident response strategy, push forward advanced threat detection and defense capabilities, and take point on the most complex security investigations across the enterprise. The role includes participation in a 24/7 on‑call incident response rotation.

Location:

hybrid at Draper, UT or Sunnyvale, CA, 4 days a week.

• Serve as a Level 3 / Staff escalation point for high‑severity incidents.
• Lead investigations into APTs, ransomware, insider threats, and cloud compromises.
• Act as incident commander and coordinate response efforts.
• Participate in 24/7 on‑call incident response.
• Lead threat hunting across endpoint, network, identity, and cloud.
• Operationalize threat intelligence into detections and response.
• Design and improve detections across SIEM, EDR, and SOAR.
• Automate incident triage and response workflows.
• Drive post‑incident reviews and continuous improvement.
• Mentor team members and influence security strategy.

• 12+ years in Incident Response, DFIR, Threat Hunting, or Security Operations.
• Deep expertise in incident response, threat hunting, and threat intelligence.
• Strong knowledge of MITRE ATT&CK and adversary TTPs.
• Experience with SIEM, EDR, SOAR, and cloud security.
• Scripting experience (Python, Power Shell, or Bash).
• Strong communication and leadership skills.
• U.S. Citizen.

• Experience building threat hunting or detection programs.
• Background in threat intelligence or red/purple teaming.
• Certifications such as GCFA, GCIH, CISSP, CISM, OSCP.

Base Pay Ranges:

• SF Bay Area, New York City Metro Area: $ – $ USD
• California (excludes SF Bay Area), Colorado, Connecticut, Illinois, Washington DC Metro, Maryland, Massachusetts, New Jersey, Texas, Washington, Virginia, and Alaska: $ – $ USD
• All other cities and states excluding those listed above: $ – $ USD

Proofpoint is an equal opportunity employer and hires without consideration of race, religion, creed, color, national origin, age, gender, sexual orientation, marital status, veteran status, or disability.