Senior Incident Response and Threat Prevention Engineer

Ready to be a Titan?
Are you a passionate problem solver who thrives on tackling complex challenges in the world of cybersecurity? Do you have an insatiable curiosity for uncovering security threats and a relentless drive to stay ahead of attackers? ServiceTitan is looking for a talented and driven Incident Response and Threat Prevention Specialist to join our mission of safeguarding our operations and services from disruption or loss.

In this high-impact role, you’ll be the first line of defense, leading investigations and proactively building tools and frameworks to detect and neutralize potential threats. You’ll partner with cutting-edge infrastructure engineers, IT experts, developers, and external vendors, while harnessing modern technologies and innovative approaches to outsmart attackers. If you’re excited by the prospect of merging technical expertise with creativity in a fast-paced, collaborative environment, we’d love to hear from you!

What You’ll Do:

• Detect and Respond: Act as the first responder for alerts, events, and incidents, taking charge of the investigation from start to resolution while ensuring thorough documentation.

• Proactively Build Defense Mechanisms: Develop and implement alerting systems, response playbooks, and customized monitoring solutions, integrated with cutting-edge tools and datasets.

• Collaborate Across Teams: Work hand-in-hand with infrastructure engineers, IT teams, and developers to design and deploy innovative solutions that mitigate or eliminate entire attack vectors.

• Harden Security Systems: Identify threats, build response capabilities, and create abuse cases that bolster ServiceTitan’s security posture.

• Conduct Post-Incident Analysis: Participate in post-mortems to identify root causes and create action plans that improve prevention, detection, and response strategies.

• Perform Deep-Dive Forensics: Leverage your knowledge of logs, protocols, and analysis tools to investigate security incidents and extract key findings.

• Stay Ahead of Threats: Research and prototype advanced threat prevention solutions, monitor industry trends, and engage with external security organizations to gather the latest intelligence.

What You’ll Bring:

We’re seeking candidates with a combination of technical expertise, critical thinking, and an unstoppable curiosity to excel in the ever-evolving threat landscape. To thrive in this role, you’ll need:

• Cloud Proficiency: Hands-on experience with enterprise cloud platforms like Microsoft Azure or AWS.

• Tool Mastery: Expertise using tools such as CSPM, SIEM, and SOAR to monitor, analyze, and respond to security events.

• Programming Skills: Proficiency in one or more scripting languages (e.g., Python, Go, or similar) for building automation and custom solutions.

• Log Analysis Skills: Experience analyzing diverse log sources to identify patterns and uncover hidden threats.

• Data Query Expertise: Proficiency with database querying and analysis tools to extract actionable insights.

• Network Savviness: A deep understanding of network protocols and their role in threat identification and response.

• Framework Familiarity: A working knowledge of the MITRE ATT&CK framework to map attack tactics and techniques.

• Collaboration Mindset: A proven ability to work across teams to create holistic solutions that address complex security challenges.

• Continuous Learning: A passion for staying ahead of security trends and technologies, with a demonstrated ability to apply cutting-edge knowledge to real-world scenarios.

• External Relationships: Established connections with security organizations and an aptitude for gathering actionable Open Source Intelligence (OSINT).

• Exploit Reproduction Skills: Experience reproducing proof-of-concept exploits in controlled environments to improve detection and prevention capabilities.

• Adaptability: A desire to experiment with emerging technologies and drive innovation in threat prevention solutions.

Additional Perks

• Cutting-Edge Environment: Work with modern technologies and tools in a cloud-native, fast-paced environment that values innovation and adaptability.

• Collaborative Culture: Engage with talented cross-functional teams in a company that values teamwork, inclusivity, and continuous learning.

• Make an Impact: Your work will directly safeguard our services and ensure uninterrupted operations for our customers.

• Professional Growth: Benefit from the mentorship of senior security leaders and a learning-focused environment that supports your growth as a cybersecurity expert.

Be Human With Us:

Being human isn’t about checking every box on a list. It’s about the experiences we have, people we meet, and the perspectives we share. So, if you have the skills but are hesitant to apply because of your background, apply anyway. We need amazing people like you to help us challenge the conventional and think differently about the problems that we’re solving. We’re in this together. Come be human, with us. 

What We Offer:

When you join our team, you’re not just accepting a job. You’re making a career move. Here’s how we’ll support you in doing some of the most impactful work of your career:

• Flextime, recognition, and support for autonomous work: Flexible time off with ample learning and development opportunities to continue growing your career. We offer a comprehensive onboarding program, leadership training for Titans at all levels, and other programs and events. Great work is rewarded through Bonusly, peer-nominated awards, and more.

• Holistic health and wellness benefits: Company-paid medical, dental, and vision (available to employees and their dependents day 1), parent and siblings’ insurance, pet insurance, wellness benefit, office massage, etc.

• Support for Titans at all stages of life: Parental leave and support, on demand maternity support through Maven Maternity, financial planning tools, Employee Assistance Program services, and more

At ServiceTitan, we celebrate individuality and uniqueness. We believe that the convergence of fresh perspectives and experiences from all walks of life is what makes our product and culture so great. We strongly encourage people from underrepresented groups to apply. We do not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.