This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Infrastructure Security team at Scribd is responsible for protecting our applications, platforms, and users through proactive, engineering-led security practices. As Scribd continues to scale, we are evolving our Detection & Response capabilities from reactive alerting toward a time-based security model - where speed, signal quality, and resilience are first-class design goals. As a Senior Security Engineer focused on Detection & Response, you will help shape Scribd’s long-term detection and response capabilities while owning execution within a defined domain. You’ll work closely with application, infrastructure, and IT security teams - as well as our managed detection and response (MDR) partner - to design high-fidelity telemetry, operationalize our SIEM, and continuously reduce mean time to detect and respond (MTTD/MTTR). This role is ideal for someone who enjoys building durable security systems, translating incidents into engineering improvements, and gradually expanding ownership through demonstrated impact.
Job Responsibility:
Design and operationalize detection capabilities
Own and evolve detection coverage across applications, APIs, cloud infrastructure, identity, and bot/abuse surfaces
Translate threat models and real incidents into high-confidence detection patterns
Partner with engineers to instrument high-quality, security-relevant telemetry at the application and platform layers
Operationalize and mature the SIEM
Lead enrichment, normalization, and correlation of logs into actionable security signals
Define detection standards and patterns to reduce noise and improve signal quality
Ensure telemetry supports both internal investigations and MDR-led monitoring
Improve response speed and quality
Reduce MTTD and MTTR through improved triage, automation, and contextual alerting
Build and maintain runbooks, response workflows, and post-incident learning loops
Partner with IT Security and the MDR provider to continuously improve detection and response outcomes
Advance runtime and behavior-based protections
Help design and deploy runtime detection and protection techniques (RASP-like approaches), especially for modern interfaces such as GraphQL
Support bot detection, abuse prevention, and DDoS mitigation in collaboration with application and platform teams
Leverage deception techniques (e.g., honeypots, canaries) to detect and learn from adversary behavior
Define and track meaningful metrics
Implement and track detection and response KPIs (e.g., coverage, signal quality, MTTD/MTTR)
Use metrics to guide prioritization and measure improvement over time
Align measurements with frameworks such as Time-Based Security and NIST CSF
Validate and improve continuously
Participate in purple-team exercises, tabletop simulations, and incident retrospectives
Ensure detection, response, and protection capabilities work cohesively within targeted timeframes
Requirements:
4+ years of experience in security engineering, detection engineering, incident response, or an equivalent blend of software and security engineering
Hands-on experience designing or operating detection and response systems (not just responding to alerts)
Strong understanding of logging, telemetry, and signal design in modern cloud and application environments
Experience with SIEM technologies such as Splunk, Elasticsearch, Datadog, Chronicle, or similar platforms
Experience partnering with or operating alongside an MDR or SOC provider
Familiarity with threat detection and response frameworks (e.g., MITRE ATT&CK, Time-Based Security, NIST CSF)
Ability to write quality code or tooling in at least one backend language (preferably Python, Ruby, or Go)
Strong collaboration and communication skills, with the ability to influence engineers without formal authority
Nice to have:
Experience with bot detection, abuse prevention, or DDoS mitigation
Experience instrumenting or protecting GraphQL APIs
Experience building automation for alerting, triage, or response workflows
Exposure to purple-team or adversary simulation exercises
What we offer:
Healthcare Insurance Coverage (Medical/Dental/Vision): 100% paid for employees
12 weeks paid parental leave
Short-term/long-term disability plans
401k/RSP matching
Onboarding stipend for home office peripherals + accessories
Learning & Development allowance
Learning & Development programs
Quarterly stipend for Wellness, WiFi, etc.
Mental Health support & resources
Free subscription to the Scribd Inc. suite of products
Referral Bonuses
Book Benefit
Sabbaticals
Company-wide events
Team engagement budgets
Vacation & Personal Days
Paid Holidays (+ winter break)
Flexible Sick Time
Volunteer Day
Company-wide Employee Resource Groups and programs that foster an inclusive and diverse workplace
Access to AI Tools: We provide free access to best-in-class AI tools, empowering you to boost productivity, streamline workflows, and accelerate bold innovation