Lead Security Engineer

Job Overview

Lead the Digital Forensics and Incident Response (DFIR) at Dave. Own the vision and execution for digital forensics and incident response across cloud, endpoint, and SaaS.

Responsibilities

• Establish core forensics workflows and evolve the company's SIEM.
• Own detection off of CrowdStrike, tune Chronicle outputs, and build noise-resistant alert handling.
• Partner on Upwinds CDR deployments, increasing breadth and depth of coverage.
• Write tooling in Python and Terraform for automation and deployment.
• Define what clarity looks like during incidents to ensure calm, fast, and confident responses.

Requirements & Qualifications

• 6+ years in DFIR, detection engineering, or incident response roles.
• Strong hands-on experience with cloud-first environments, particularly Google Cloud Platform (GCP).
• Proficiency with Endpoint Detection and Response (EDR) tools like CrowdStrike, and SIEM tools like Chronicle.
• Fluency in Python and Terraform for automation and deployment.
• Clear communicator under pressure, capable of driving calm, cross-functional collaboration.