Security Engineer (Remote)

Stack

Responsibilities

• ▹Manage and harden security baselines across on-prem, hybrid, and cloud systems
• ▹Integrate telemetry, logging, and tracing for unified observability into infrastructure and application activity
• ▹Lead vulnerability management, patching, and configuration assurance programs
• ▹Partner with infrastructure, IT, and application teams to strengthen identity and access security through Okta, Google Workspace, and FreeIPA
• ▹Implement and maintain zero-trust network architectures, SASE controls, and CASB solutions
• ▹Operate and enhance SIEM, SOAR, and EDR/XDR security operations tooling
• ▹Develop detection logic, automation, and playbooks for insider activity, lateral movement, and anomalous behavior
• ▹Investigate and respond to security incidents, performing root-cause analysis, containment, and remediation
• ▹Build automation, scripts, AI agents, and integrations to streamline monitoring, alerting, and remediation workflows
• ▹Establish metrics and dashboards to measure detection coverage, response time, and overall security health
• ▹Promote a culture of security awareness and ownership across engineering teams

Requirements

• ▹5-7+ years of experience in security engineering, SOC operations, detection engineering, or incident response
• ▹Strong software engineering skills in Python, Go, and Bash (C and Rust a major plus)
• ▹Proficiency with SIEM and SOAR platforms, including building detections, dashboards, and automated workflows
• ▹Deep understanding of EDR/XDR platforms, endpoint security hardening, and telemetry collection across macOS, Linux, Windows, and server environments
• ▹Experience implementing or supporting zero-trust architectures, including conditional access, SASE, and CASB
• ▹Familiarity with IAM and SSO systems such as Okta, Google Workspace, and FreeIPA
• ▹Strong networking knowledge: SDWAN, VPN, IDS/IPS, firewall administration, segmentation strategy
• ▹Hands-on experience managing or building security telemetry pipelines and observability systems
• ▹Solid understanding of threat modeling, the MITRE ATT&CK framework, and attacker tradecraft
• ▹Experience performing vulnerability assessments, penetration testing, or secure configuration reviews
• ▹Exposure to cloud and hybrid environments such as AWS, GCP, or on-prem clusters

Soft skills

What we offer

• ▹Full medical, dental, and vision packages with generous premium coverage
• ▹Housing subsidy of $2,000/month for those living within walking distance of the office
• ▹Daily lunch and dinner in the office
• ▹Relocation support for those moving to San Jose (Santana Row)
• ▹Unlimited compute budget subject to ROI justification

About the company

Etched is building hardware for frontier intelligence, co-designing chips, racks, software, and manufacturing to deliver best-in-class throughput and latency, with an initial focus on inference workloads. The company is backed by hundreds of millions from top-tier investors and staffed by leading engineers.