Security Engineer - Incident Response

Peloton Interactive, Inc. seeks Security Engineer - Incident Response in New York City, NY. 

Job Duties: Directly support Peloton’s Security Program while conducting in-depth research and strategic analysis of intelligence data from various sources to leverage in threat hunting. Stay up to date with relevant vulnerabilities, threat actors, indicators of compromise (IOCs) tactics, techniques, and procedures (TTPs), and trends, identifying actionable areas of interest and threats. Provide intel-driven insights into existing and emerging threats, use insights to search Peloton enterprise for activity that is anomalous and/or malicious. Work with Security Engineering and the Security Operations Center to baseline user behaviors and events as well as build out new detections and response workflows. Provide triage support for incident response and investigation efforts as part of Peloton’s Security and Operations team and other internal teams. Recommend and build countermeasures based on threat analysis, intelligence, and forecasting. Develop, implement, and maintain security incident playbooks/runbooks. Prepare and present analysis with findings and recommendations in the form of briefings, reports, and dashboards to managers, various team leads and senior leadership as required. Part-time telecommuting is an option. Hybrid work from Peloton Interactive offices in New York, NY. Salary: $146,557.00 to $194,775.00

Minimum Requirements: Master’s degree (or its foreign degree equivalent) in Computer Science, Informatics, Computer and Information Technology, Engineering (any field), or a related quantitative discipline, and three (3) years of experience in the job offered or in any occupation in related field.

Special Skill Requirements: One year of experience in the following: (1) Cloud Workload protection, (2) Cloud Native application protection platform; (3) Cloud Security Posture Management; (4) Threat modeling; (5) OWASP top 10; (6) BURP Suite; (7) SAST; (8) Software Composition Analysis; (9) API Security; (10) code reviews; (11) Kubernetes Security; (12) Web Application Firewall (WAF); (13) ELK Stack; (14) Splunk. Any suitable combination of education, training and/or experience is acceptable. Part-time telecommuting is an option. Hybrid work from Peloton Interactive offices in New York, NY.

Salary: $146,557.00 to $194,775.00 per annum.

Submit a resume with references to: Req. # L24-158494 via the Peloton Careers webpage: https://www.onepeloton.com/careers or by email at: onlinejobpostings@onepeloton.com.

#LI-DNI