Threat Engineer

Human Interest is on a mission to ensure that people in all lines of work have access to retirement benefits. Nearly half of all working Americans are not saving enough for their future because they are employed by a company that doesn’t offer a retirement plan. Human Interest is changing that by making it affordable and accessible for small and medium sized businesses to offer employees a path to financial independence through retirement savings.

Our values (the guiding principles that reflect our view on what’s important and what’s right): In it for customers, autonomous & accountable, outcomes driven, inclusive collaboration, and decisive.

Human Interest is currently seeking a Threat Engineer working with other Information Security team members on the Security Operations Center (SOC) team. You will be on a rotation responsible for the daily triage of alerts from all Human Interest Security platforms, and handling detection and response to Human Interest clients, Cyber Executive Protection (CEP), and internal business units. 

Human Interest is seeking candidates that want to get immersed in the field of cybersecurity by performing mission critical SOC functions. Candidates for this position should have the relevant experience within complex analytical roles that include security event investigations, incident response, forensic analysis, and malware reverse engineering, report writing, leading projects, leading teams and mentoring.

What you get to do every day 

• Mentor SOC Analysts, improve signals for the SIEM + tools and performing mission critical Incident Response with IOC with root cause + remediation 
• Work assigned shifts that will include around-the-clock coverage of SOC duties
• Triage alerts from intrusion detection systems, antivirus, cloud-based services, windows servers, network infrastructure, data loss prevention systems, and user behavior analytics
• Conduct deep-dive analysis on attacks, detect and analyze malware samples, hacking tools, phishing kits, network packet captures, exploits and network infrastructure associated with adversaries to document and perform hunts for related activity
• Provide feedback on process improvements and how to eliminate false positive alerts from the incident response workflow
• Identify and track adversary infrastructure and tools by leveraging open source and commercial datasets
• Collaborate with Managed Service Providers and clients to handle inbound requests for information during normal duty hours
• Collaborate with partner teams to design and maintain systems supporting collection, processing and analysis of raw intelligence and data

What you bring to the role

• Minimum 4 years of experience in a security/software engineer role
• Experience developing web applications and using Python
• Academic and/or working experience with TCP/IP networking, and networking services such as DNS, SMTP, DHCP, etc.
• Advanced knowledge of Windows, MacOS, Linux-variant operating systems such as the file system structure, system services, typical behavior of endpoints and servers
• Advanced knowledge of cloud-based services such as Google Workplace and other SaaS productivity tools
• Experience with security tools such as: AWS GuardDuty; SIEMs (ELK or Splunk); NIDS (Darktrace); HIDS or ERD/XRD (Malwarebytes); DLP and SOAR tools
• Solid understanding of Incident Response Handling procedures, Cyber Kill Chain and the MITRE ATT&CK framework
• Ability to mentor SOC Analysts and work both independently and collaboratively with peers, across teams, and with management
• Excellent analytical, communication, presentation and listening skills
• Excellent organizational and time-management skills
• Flexibility and adaptability to change

Please feel free to apply to this position even if you do not meet 100% of the requirements listed above.

Why you will love working at Human Interest

Mission - Highly collaborative startup dedicated to supporting employee engagement and growth. It’s an opportunity to help solve one of the biggest unsolved problems in America: saving for retirement.

Compensation -

The salary range for this role is between $135,000 - $150,000. This information reflects a base salary range for this position based on current market data, and may vary by location. Exact compensation will be determined by the candidates' skills, experience, and other relevant factors. This position may also be eligible for additional incentives such as equity awards, short-term incentives, or sales compensation.

Benefits - 

• A great 401(k) plan: our own! Our 401(k) includes a dollar-for-dollar employer match up to 4% of compensation. 
• Employees also receive 100% paid employee health, vision, and dental premiums; dependent premiums are covered at 50%. 
• Generous PTO and parental leave policies.
• Monthly work from home stipend; annual wellness stipend.
• Employee Resource Groups including Veterans, Lift Ev’ry Voice, Pride, LatinX, Families, and Women in Tech.
• Fun online and regional events and celebrations and department and company-wide offsites.
• The vast majority of our positions can be 100% remote.
  

About Human Interest: 

We’re a high-growth, Series D-funded company that’s changing the retirement industry. Named one of America’s Best Startup Employers by Forbes, one of the Best Places to Work by the San Francisco Business Times, and a Top Company by Y Combinator, we’ve raised $337M and are backed by leading investors, including TPG (The Rise Fund), SoftBank, Glynn Capital, NewView Capital, USVP, Wing, Uncork, and others.

Inclusive collaboration makes us a better business

Human Interest is an equal opportunity employer. All applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran or military status, pregnancy, or any other characteristics protected under federal, state, or local laws.

Human Interest employees must adhere to the Company’s security policies and Code of Ethics. 

Please note Human Interest does not accept unsolicited resumes from any source other than directly from candidates. We will not consider resumes from vendors including and without limitation search firms, staffing agencies, fee-based referral services, and recruiting agencies. Pursuant to the San Francisco Fair Chance Ordinance, we will consider employment-qualified applicants with arrest and conviction records. We comply with CCPA guidelines. See more: https://humaninterest.com/disclosures