{"id":2475172,"url":"https://alion.io/job/liftoff-security-engineer-detection-response","title":"Security Engineer, Detection & Response","company":{"id":17308,"name":"Liftoff","domain":"liftoff.ai","url":"https://alion.io/company/liftoff","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":200000,"max":240000,"currency":"USD","period":"year","gross":null,"usd_annual":240000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"CI/CD","optional":true},{"name":"Linux","optional":true},{"name":"LLM","optional":true}],"status":"live","first_seen_at":"2026-05-15T16:59:24Z","employer_posted_date":"2026-08-12","last_verified_at":"2026-10-14T10:17:03Z","board_verified":true,"closed_at":null,"days_open":151,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":151},"description":"Liftoffis a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize revenue across programmatic and direct demand.\nLiftoff’s solutions, including Accelerate, Direct, Monetize, Intelligence, and Vungle Exchange, support over 6,600 mobile businesses across 74 countries in sectors such as gaming, social, finance, ecommerce, and entertainment. Founded in 2012 and headquartered in Redwood City, CA, Liftoff has a diverse, global presence.\nThe Liftoff Security team protects Liftoff's customers, users, and employees. We architect Liftoff's security posture, build the tools and systems that defend it, and partner with engineering teams as they ship new products and features. Our work spans the entire stack - infrastructure, web, mobile, and IT - and we approach security from a software engineering standpoint, scaling our impact through automation and well-designed tools.\nNow is the time to join! Here's why:\nBuild out our detection and response function. Liftoff has a mature security information and event management platform (SIEM), established detection content, and a working incident response program. Your charter is to take it to the next level - including leading our investment in AI-augmented SOC tooling.\nHigh visibility, high impact. Detection and response is a critical capability for Liftoff.\nSecurity-conscious engineering culture. Liftoff's engineering org is a willing and capable partner on security work.\nHands-on technical work. Stay deep in code, detections, and incidents.\nBreadth of work. Detection and response is the primary focus, but you'll partner across the security team on cloud, infrastructure, and application security where the work demands it.\nLarge-scale, interesting systems. Liftoff processes millions of requests per second across its demand-side platform (DSP), mobile software development kit (SDK), and ad exchange.\nResponsibilities:\nOwn day-to-day operation of Liftoff's SIEM (Panther) - log source ingestion, detection content, and the alert investigation pipeline.\nLead Liftoff's adoption of AI-augmented SOC tooling (e.g. Prophet, Dropzone, or equivalent) as a multi-year modernization investment.\nTriage incoming security alerts and drive timely investigation and remediation with stakeholders across Engineering and IT.\nLead incident response - investigation, containment, and post-incident review - and mature processes and runbooks so response becomes predictable and repeatable.\nBuild tooling and automation that detects active threats, enriches alerts, and reduces manual investigation toil.\nPartner with Engineering and IT to make detection and response self-service where possible - clear log-onboarding paths, documented detection proposals, accessible runbooks - so security scales without becoming a bottleneck.\nClose the feedback loop between the team's offensive and proactive findings and detection coverage.\nPartner across the security team on cloud, infrastructure, and application security work alongside your detection and response focus - every engineer on this team covers breadth beyond their primary focus.\nParticipate in the Security team's on-call rotation and incident response.\nMinimum Qualifications:\n5+ years in security engineering, security operations, detection engineering, or software engineering with a security focus.\nHands-on production SIEM operation - onboarding log sources, writing and maintaining detection content, and triaging alerts.\nWrite production-quality code for security automation and detection-as-code.\nExperience leading or substantially contributing to security incident response.\nStrong technical writing - design docs, runbooks, and post-incident reviews.\nDemonstrated judgment in prioritizing security work using a risk-based approach.\nAbility to quickly navigate large, unfamiliar codebases and reason about complex engineering systems.\nExcellent verbal communication.\nWilling to participate in an on-call rotation.\nDesirable Qualifications:\nHands-on experience with an AI-augmented SOC platform (Prophet Security, Dropzone AI, or equivalent), or with building large language model (LLM) augmented investigation and runbook tooling.\nExperience operating in cloud environments at scale.\nCloud incident response experience, particularly in AWS.\nEndpoint forensics for incident response on Mac and/or Linux.\nDetection-as-code workflows in continuous integration and deployment (CI/CD) pipelines.\nMobile adtech or high-volume SaaS background.\nCompensation:\nThe following are our base salary ranges for this role:\nSF Bay Area, Los Angeles/Orange County, NYC, Seattle: $200,000 - $240,000 \nAll other California and Washington state locations, Austin, Boston, Denver, Portland: $184,000 - $220,000 \nAll other cities and towns in our approved states: $172,000 - $206,000\nLocation:\nThis role is eligible for full-time remote work in one of our entities: CA, CO, ID, IL, FL, GA, MA, MI, MN, MO, NJ, NV, NY, OR, PA, TX, UT, and WA.\nWe are a remote-first company with US hubs in Redwood City, Los Angeles, and New York City.\nTravel Expectations:\nWe offer several opportunities for in-person team gatherings, including but not limited to project meetings, regional meetups, and company-wide events. We expect our employees to attend these gatherings at least once per quarter. These gatherings provide essential opportunities for collaboration, communication, and team building.\nLiftoff offers a fast-paced, collaborative, and innovative work environment where employees are empowered to grow and make an impact. We’re shaping the future of the mobile app ecosystem-join us and help accelerate what’s next.\nLiftoff’s compensation strategy includes competitive salaries, equity, and benefits designed to support employee well-being and performance. We benchmark compensation based on role, level, and location to ensure fairness and market alignment. Benefits may include medical coverage, wellness stipends, and additional perks based on your country of residence.\nLiftoff is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and applicants regardless of race, ethnicity, national origin, age, marital status, disability, sexual orientation, gender identity, religion, veteran status, or any other characteristic protected by applicable law.\nAgency and Third Party Recruiter Notice:\nLiftoff does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to our hiring managers or Recruiting Team. All candidates must be submitted via our Applicant Tracking System by approved Liftoff vendors who have been expressly requested to make a submission by our Recruiting Team for a specific job opening. No placement fees will be paid to any firm unless such a request has been made by the Liftoff Recruiting Team and such a candidate was submitted to the Liftoff Recruiting Team via our Applicant Tracking System.","description_format":"text","description_chars":7149,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Advertising","Marketing & Sales AI"],"lifecycle":[{"event":"open","at":"2026-10-13T21:08:17Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.398,"p_room":0.28,"age_days":151,"expected_fill_days":40,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":240000,"is_top_pay":true},"html_url":"https://alion.io/job/liftoff-security-engineer-detection-response","json_url":"https://alion.io/job/liftoff-security-engineer-detection-response.json","meta":{"generated_at":"2026-10-14T10:20:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27530,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17308},"rest":"https://alion.io/mcp/rest/get_company?id=17308"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fliftoff-security-engineer-detection-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fliftoff-security-engineer-detection-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fliftoff-security-engineer-detection-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/liftoff-security-engineer-detection-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fliftoff-security-engineer-detection-response"}]}