At IBM Software, we transform client challenges into solutions. Building the world's leading AI-powered, cloud-native products that shape the future of business and society. Our legacy of innovation creates endless opportunities for IBMers to learn, grow, and make an impact on a global scale. Working in Software means joining a team fueled by curiosity and collaboration. You'll work with diverse technologies, partners, and industries to design, develop, and deliver solutions that power digital transformation. With a culture that values innovation, growth, and continuous learning, IBM Software places you at the heart of IBM's product and technology landscape. Here, you'll have the tools and opportunities to advance your career while creating software that changes the world.

We are looking for an experienced security engineer to join our infrastructure security engineering team with a strong focus on detection and response. You will have a unique opportunity to leverage your threat detection and response experience and build some of the foundational systems and services to keep our infrastructure free from malicious actors and threats.

You will partner closely with all engineering teams, IT administrators, and compliance analysts to ensure that we maintain sufficient visibility into our environments and develop effective programs and practices to ensure that our environments are always secure. Tooling and automation will be key to success as we scale our environments to meet customer demand.

We intend to be the world's best, fastest, and most complete stream processing service built by an excellent team, all while having fun - come join us on the journey!

What You Will Do:

• Collaborate with engineering teams for building and setting up pipelines needed to gather relevant security telemetry.

  
  
  

• Build and maintain an effective and scalable security monitoring infrastructure solution.

  
  
  

• Develop detection strategies to identify anomalous activity and ensure that our critical infrastructure and services operate in a safe environment.

  
  
  

• Triage alerts and drive security incidents to closure while reducing its potential impact to Confluent.

  
  
  

• Build processes and workflows to triage security alerts and respond to real incidents.

  
  
  

• Research new threat attack vectors and ensure that our detection and response capability is in line with the current threat landscape.

  
  
  

• Proactively improve the quality of our detection rules and strive to eliminate classes of issues by working directly with engineering teams.

  
  
  

• Contribute to strategy, risk management and prioritization for all efforts around detection and response.

  
  
  

• 8+ years of relevant industry experience.

  
  
  

• Strong domain knowledge in security incident detection and response.

  
  
  

• Hands-on experience in instrumenting and deploying telemetry solutions to ensure visibility in large-scale, heterogenous deployments.

  
  
  

• Demonstrated experience with effective incident response and containment practices, preferably in a cloud-first environment.

  
  
  

• Experience with operating open-source and/or commercial solutions for logging and security event management.

  
  
  

• Decision-maker with the ability to operate with freedom and autonomy.

  
  
  

• Experience working with distributed teams and other cross-functional stakeholders.

  
  
  

• Ability to manage competing priorities and workload.

  
  
  

• Ability to script or code fluently in an interpreted language.

  
  
  

• Experience with serverless deployments in AWS, GCP, or Azure is a plus.