安全工程师，检测与响应
Security Engineer, Detection & Response
Liftoff 是移动应用经济中领先的 AI 驱动的性能营销平台。我们的端到端技术栈帮助应用营销人员获取并留住高价值用户，同时使发布者能够在程序化和直接需求中最大化收入。
Liftoff 的解决方案，包括 Accelerate、Direct、Monetize、Intelligence 和 Vungle Exchange，支持全球 74 个国家的 6600 多家移动企业，涵盖游戏、社交、金融、电商和娱乐等行业。Liftoff 成立于 2012 年，总部位于加利福尼亚州 Redwood City，拥有多元化、全球化的业务布局。
Liftoff 安全团队保护 Liftoff 的客户、用户和员工。我们设计 Liftoff 的安全策略，构建防御工具和系统，并与工程团队合作，在他们发布新产品和功能时提供支持。我们的工作覆盖整个技术栈——基础设施、网络、移动端和 IT，并从软件工程的角度出发，通过自动化和精心设计的工具扩大影响力。
#### **现在加入正当时！以下是原因：**
- 构建我们的检测与响应能力。Liftoff 拥有成熟的 Security Information and Event Management（SIEM）平台（Panther），已建立的检测内容和运行中的事件响应计划。你的职责是将其提升到新高度——包括主导我们在 AI 增强型 SOC 工具上的投资。
- 高可见度、高影响力。检测与响应是 Liftoff 的关键能力。
- 安全意识强的工程文化。Liftoff 的工程团队在安全工作中是积极且有能力的合作伙伴。
- 实战性的技术工作。深入代码、检测和事件中。
- 工作范围广泛。检测与响应是主要重点，但你也会与其他安全团队成员合作，处理云、基础设施和应用安全方面的工作。
- 大规模、有趣的系统。Liftoff 在需求方平台（DSP）、移动软件开发套件（SDK）和广告交易平台处理每秒数百万次请求。
#### **职责：**
- 负责 Liftoff SIEM（Panther）的日常运营——日志源采集、检测内容和警报调查流程。
- 主导 Liftoff 对 AI 增强型 SOC 工具（如 Prophet、Dropzone 或等效工具）的采用，作为多年现代化投资的一部分。
- 处理接收到的安全警报，并与工程和 IT 团队的相关方协作，及时进行调查和修复。
- 领导事件响应——调查
查看英文原文
Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize revenue across programmatic and direct demand.
Liftoff’s solutions, including Accelerate, Direct, Monetize, Intelligence, and Vungle Exchange, support over 6,600 mobile businesses across 74 countries in sectors such as gaming, social, finance, ecommerce, and entertainment. Founded in 2012 and headquartered in Redwood City, CA, Liftoff has a diverse, global presence.
The Liftoff Security team protects Liftoff's customers, users, and employees. We architect Liftoff's security posture, build the tools and systems that defend it, and partner with engineering teams as they ship new products and features. Our work spans the entire stack — infrastructure, web, mobile, and IT — and we approach security from a software engineering standpoint, scaling our impact through automation and well-designed tools.
#### **Now is the time to join! Here's why:**
- Build out our detection and response function. Liftoff has a mature security information and event management platform (SIEM), established detection content, and a working incident response program. Your charter is to take it to the next level — including leading our investment in AI-augmented SOC tooling.
- High visibility, high impact. Detection and response is a critical capability for Liftoff.
- Security-conscious engineering culture. Liftoff's engineering org is a willing and capable partner on security work.
- Hands-on technical work. Stay deep in code, detections, and incidents.
- Breadth of work. Detection and response is the primary focus, but you'll partner across the security team on cloud, infrastructure, and application security where the work demands it.
- Large-scale, interesting systems. Liftoff processes millions of requests per second across its demand-side platform (DSP), mobile software development kit (SDK), and ad exchange.
#### **Responsibilities:**
- Own day-to-day operation of Liftoff's SIEM (Panther) — log source ingestion, detection content, and the alert investigation pipeline.
- Lead Liftoff's adoption of AI-augmented SOC tooling (e.g. Prophet, Dropzone, or equivalent) as a multi-year modernization investment.
- Triage incoming security alerts and drive timely investigation and remediation with stakeholders across Engineering and IT.
- Lead incident response — investigation, containment, and post-incident review — and mature processes and runbooks so response becomes predictable and repeatable.
- Build tooling and automation that detects active threats, enriches alerts, and reduces manual investigation toil.
- Partner with Engineering and IT to make detection and response self-service where possible — clear log-onboarding paths, documented detection proposals, accessible runbooks — so security scales without becoming a bottleneck.
- Close the feedback loop between the team's offensive and proactive findings and detection coverage.
- Partner across the security team on cloud, infrastructure, and application security work alongside your detection and response focus — every engineer on this team covers breadth beyond their primary focus.
- Participate in the Security team's on-call rotation and incident response.
#### **Minimum Qualifications:**
- 5+ years in security engineering, security operations, detection engineering, or software engineering with a security focus.
- Hands-on production SIEM operation — onboarding log sources, writing and maintaining detection content, and triaging alerts.
- Write production-quality code for security automation and detection-as-code.
- Experience leading or substantially contributing to security incident response.
- Strong technical writing — design docs, runbooks, and post-incident reviews.
- Demonstrated judgment in prioritizing security work using a risk-based approach.
- Ability to quickly navigate large, unfamiliar codebases and reason about complex engineering systems.
- Excellent verbal communication.
- Willing to participate in an on-call rotation.
#### **Desirable Qualifications:**
- Hands-on experience with an AI-augmented SOC platform (Prophet Security, Dropzone AI, or equivalent), or with building large language model (LLM) augmented investigation and runbook tooling.
- Experience operating in cloud environments at scale.
- Cloud incident response experience, particularly in AWS.
- Endpoint forensics for incident response on Mac and/or Linux.
- Detection-as-code workflows in continuous integration and deployment (CI/CD) pipelines.
- Mobile adtech or high-volume SaaS background.
**Compensation**:
The following are our base salary ranges for this role:
- **SF Bay Area, Los Angeles/Orange County, NYC, Seattle**: $200,000 - $240,000
- **All other California and Washington state locations, Austin, Boston, Denver, Portland:** $184,000 - $220,000
- **All other cities and towns in our approved states:** $172,000 - $206,000
* * *
**Location:**
This role is eligible for full-time remote work in one of our entities: CA, CO, ID, IL, FL, GA, MA, MI, MN, MO, NJ, NV, NY, OR, PA, TX, UT, and WA.
_We are a remote-first company with US hubs in Redwood City, Los Angeles, and New York City._
**Travel Expectations:**
We offer several opportunities for in-person team gatherings, including but not limited to project meetings, regional meetups, and company-wide events. We expect our employees to attend these gatherings at least once per quarter. These gatherings provide essential opportunities for collaboration, communication, and team building.
* * *
#LI-REMOTE
#LI-EL1
* * *
Liftoff offers a fast-paced, collaborative, and innovative work environment where employees are empowered to grow and make an impact. We’re shaping the future of the mobile app ecosystem—join us and help accelerate what’s next.
Liftoff’s compensation strategy includes competitive salaries, equity, and benefits designed to support employee well-being and performance. We benchmark compensation based on role, level, and location to ensure fairness and market alignment. Benefits may include medical coverage, wellness stipends, and additional perks based on your country of residence.
Liftoff is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and applicants regardless of race, ethnicity, national origin, age, marital status, disability, sexual orientation, gender identity, religion, veteran status, or any other characteristic protected by applicable law.
**Agency and Third Party Recruiter Notice:**
Liftoff does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to our hiring managers or Recruiting Team. All candidates must be submitted via our Applicant Tracking System by approved Liftoff vendors who have been expressly requested to make a submission by our Recruiting Team for a specific job opening. No placement fees will be paid to any firm unless such a request has been made by the Liftoff Recruiting Team and such a candidate was submitted to the Liftoff Recruiting Team via our Applicant Tracking System.