Jumio
Senior Detect & Respond Engineer
Job Summary
This role involves monitoring and analyzing security logs and network traffic, supporting incident triage and response, and designing security monitoring capabilities. The candidate will create dashboards, reports, and incident response documentation while working closely with threat intelligence teams. Experience with cloud security, automation, and security frameworks is essential, along with strong analytical and communication skills. The position emphasizes fostering a security-aware culture within the organization.
Required Skills
Job Description
Role Purpose:
Security is paramount to the success of our business. This role helps protect our information and products, by driving our detect and respond initiatives and driving a culture of positive cybersecurity into the heart of our business.
Role Value:
Having the highest levels of security and compliance are essential to Jumio’s business. By setting and achieving the highest standards this role has a direct impact on the integrity of our business, our customers’ confidence and, ultimately, the continued growth and success of the company.
Responsibilities:
- Perform deeper log analysis, network traffic analysis on a regular basis.
- Provide support for daily monitoring of security events, responding to alerts, and tracking incidents.
- Perform incident triage in support of the overall investigation, by determining scope, urgency and potential impact including identifying the specific vulnerability, attack vector and recommending remediation actions.
- Support the design and deployment of cloud native security monitoring capabilities.
- Create event dashboards, metrics and establish threshold standards.
- Provide high-quality security monitoring KPI and KRI statistics and reports on a regular basis.
- Create and maintain Cyber Security Incident Response documentation, including playbooks, runbooks, policies, processes and procedures.
- Definition of use cases that can be automated for incident response workflows.
- Work closely with external threat intelligence teams and consume threat feeds on a regular basis, triage and proactive responses to threats of interest.
- Maintain strong relationships with all interested parties that affect the security posture of the company and incident handling escalation touchpoints.
- Supports security crisis response simulations, and follow on improvements.
- Empower and educate our people through security and cultural innovation.
- Drive the culture of positive cybersecurity into the heart of our business.
Experience and Qualifications:
- Proven commercial experience in a detect and response capacity and influencing positive change in a diverse IT landscape including cloud as well as on-prem, external web services and end user endpoints
- Cloud Security and Posture Monitoring (CrowdStrike)
- Experience in Terraform, Kubernetes, Docker and CI/CD.
- Familiarity with Python scripting for development of SIEM (Panther) detections and internal automation tools
- Experience in monitoring tools like Prometheus, Grafana, Datadog
- Familiarity with AWS, Linux and Suricata IDS
- A strong awareness of the MITRE ATT&CK Framework
- Working with global information security frameworks and standards like PCI DSS, ISO 27001, SOC2, CSF 2.0
- Developing successful global security operations processes
- Security incident management (including Critical Incident Management), and application security best practices
- Experience of threat monitoring and management in cloud environments - AWS preferred
- Experience of successfully dealing with Advanced Persistent Threats (APT), cybercriminals, malware, and targeted phishing
- CISM, CEH, CISSP or GIAC Cyber Defence certifications a plus
- Excellent analytical, conceptual and communications skills in spoken and written English
- Fast learner, high capacity for abstract thinking and structured approach to work plus a hands-on mentality and an international mindset
Key Characteristics and Attitudes:
|
|
Jumio Values:
IDEAL: Integrity, Diversity, Empowerment, Accountability, Leading Innovation
Equal Opportunities:
Jumio is a collaboration of people with different ideas, strengths, interests and cultures. We welcome applications and colleagues from all backgrounds and of all statuses.
About Jumio:
Jumio is a B2B technology company dedicated to eradicating online identity fraud, money laundering and other financial crimes to help make the internet safer. We leverage AI, biometrics, machine learning, liveness detection and automation to create solutions that are trusted by leading brands worldwide and respected by industry thought leaders.
Jumio is the leading provider of online identity verification, eKYC and AML solutions. With a global footprint, we’re expanding the team to meet strong client demand across a range of industries including Financial Services, Travel, Sharing Economy, Fintech, Gaming, and others.
Applicant Data Privacy
We will only use your personal information in connection with Jumio’s application, recruitment, and hiring processes, as described in Jumio’s Applicant Privacy Notice. If you have any questions or comments, please send an email to [email protected].
Jumio
Accelerate customer onboarding, combat fraud, and ensure compliance with Jumio's industry-leading identity verification platform.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.