{"id":3200707,"url":"https://alion.io/job/marqeta-senior-security-engineer-detection-and-response-2","title":"Senior Security Engineer, Detection and Response","company":{"id":4993,"name":"Marqeta","domain":"marqeta.com","url":"https://alion.io/company/marqeta","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"US time zones","utc_offset_min":-8,"utc_offset_max":-5},"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":69000,"max_usd":139000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"EnCase","optional":true},{"name":"FTK","optional":true},{"name":"JavaScript","optional":true},{"name":"KAPE","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true},{"name":"Volatility","optional":true},{"name":"YARA","optional":true},{"name":"YARA","optional":true}],"status":"live","first_seen_at":"2026-10-06T02:36:15Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-25T02:47:19Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"As Marqeta's Senior Security Engineer on the Security Operations and Response team, you will lead incident response for North America and shape how we detect and respond to threats using AI-driven automation in a Next-Gen Agentic SOAR. You'll join a Security Operations & Response team that builds its own AI tools to speed up investigations and strengthen Marqeta's security posture. In this role, you'll serve as the lead technical responder during security events, engineer automated detections and response workflows, run advanced threat hunts, help to build a resilient and comprehensive security operations program, and mentor junior teammates on incident response best practices, while participating in a 24x7 on-call rotation.\nWe work Flexible First. This role can be performed remotely anywhere within the province where you reside, whether that’s Ontario, Canada or British Columbia, Canada. We’d love for you to join us!\nThis position is for an existing vacancy.\nThe Impact You’ll Have\nServe as the lead security responder in North American timezones, triaging and investigating complex alerts and acting as a core member of the Cybersecurity Incident Response Team\n\nParticipate in 24x7x365 on-call rotations, providing senior-level expertise and escalation support for security events and incidents\n\nEngineer, maintain, and continuously optimize detection logic across multiple data sources, using threat modeling to keep coverage current with the evolving attack landscape\n\nDesign detection coverage mapping that documents capabilities and identifies blind spots in the threat landscape\n\nDevelop and track KPIs with leadership, including detection effectiveness, false positive rates, and mean time to detect, respond, and recover\n\nCreate and maintain incident response runbooks, SOPs, and technical documentation to ensure consistent response operations\n\nMentor junior team members in security operations best practices, detection engineering, and incident response methodologies\n\nBuild automation workflows and orchestration playbooks that improve detection engineering, threat hunting, and incident response\n\nDevelop and use AI-driven tools for Security Operations and Incident Response\n\nConduct proactive, hypothesis-driven threat hunts across corporate and production environments, and support the logging and monitoring infrastructure that enables them\n\nWho You Are\n5+ years of hands-on experience in security operations with emphasis on Incident Response and Detection Engineering. Additional expertise in threat hunting, cyber threat intelligence, and digital forensics is preferred.\n\nIndustry certifications in Incident Response or related fields are strongly preferred, such as GCIH, GCFA, GIME, OSIR, or GEIR.\n\nIntellectual curiosity with a passion for understanding emerging threats, analyzing attack patterns, and continuously learning about evolving security landscapes and adversary tactics.\n\nStrong investigative instincts that compel you to dig deeper into anomalies, follow evidence trails, and reconstruct complex security incidents from fragmented data.\n\nCommitment to proactive learning and staying ahead of evolving threats by researching emerging attack techniques and sharing insights with the security team.\n\nSolid technical foundation in security concepts and technologies, with hands-on experience using enterprise security tools including EDR, NDR, CSPM, EASM, SIEM, SOAR, and Cloud Security platforms such as GuardDuty.\n\nProficiency with threat intelligence frameworks such as MITRE ATT&CK and their application in assessing detection capabilities and coverage gaps.\n\nExpertise in developing new threat detection use cases based on security telemetry analysis, environment baselining, actionable threat intelligence, and incident response findings.\n\nAbility to identify detection coverage gaps across global infrastructure and collaborate with stakeholders to enhance visibility through improved logging and detection content.\n\nStrong understanding of AWS cloud services and containerization technologies.\n\nNice-To-Haves\nExperience with programming languages such as Python, JavaScript, or Go\n\nExperience with infrastructure as code tools such as Terraform.\n\nExperience with forensic tools such as KAPE, EnCase, FTK, or Volatility.\n\nExperience with Detections-as-Code infrastructure like Sigma, or YARA.\n\nExperience conducting Purple Team exercises and writing reports.\n\nExperience validating vulnerabilities or reported bugs.\n\nExperience with Observability or SRE tools and processes.\n\nManager:\nGunnar Poling\n\nRecruiter:\nKayla Osuna\n\nTypical Process:\nApplication submission\n\nRecruiter phone or video call\n\nHiring manager video call\n\nVirtual “Onsite” consisting of 3-5, 45 min interviews\n\nOffer!\n\nCompensation and Benefits\nMarqeta calibrates pay to a competitive value according to working location. When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this full-time position, reflected in CAD, is: 136,800 - 171,000\nWe also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.\nAlong with monetary compensation, Marqeta currently offers:\nMultiple health insurance options\n\nFlexible vacation time with additional floating holidays\n\nRetirement savings program with company contribution\n\nEquity in a publicly-traded company\n\nMonthly stipend to support our remote work model\n\nAnnual development stipend to support our people growth and development\n\nFamily-forming benefits and generous parental leave base salary top-up\n\nAbout Marqeta\nMarqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real time. Marqeta is powering the most well known brands in the new economy (Block, Cash App, Affirm, Instacart, Doordash, Uber, Walmart, etc). You don’t need to be a Payments expert to join the Marqeta Team, let us help you with that. This is the opportunity of a lifetime to work with innovators around the world and unlock equitable financial access for all.\nMarqeta’s Values\n- Solve for the Customer: With a deep understanding of our customers' business and empathy for their needs, we deliver products and services that drive their success. Earning and keeping their trust guides everything we do.\n- Do What's Right: Knowing businesses and livelihoods depend on us, we pursue solutions that disrupt responsibly and deliver high-quality results that our customers count on. We own our work from start to finish.\n- Simplify and Innovate: We approach challenges with curiosity and take smart risks. Innovation comes from finding better, simpler ways to achieve extraordinary outcomes.\n- Win as a Team: We succeed together by embracing diverse perspectives and pushing each other to raise the bar. We lead with humility and set aside hierarchy to work as a team.\n- Make it Count: We drive forward with focus and agility. With a sense of urgency and purpose, we get the job done, and done right.\nEqual Employment Opportunity, Accommodations and Privacy\nMarqeta is an equal opportunity employer committed to an inclusive workplace that fosters belonging. We do not discriminate based on race, color, religion, sex (including pregnancy, lactation, childbirth, or related medical conditions), veteran status or uniformed service member status, age, national origin or ancestry, citizenship or immigration status, physical or mental disability, gender identity, gender expression, sexual orientation, genetic information (including testing or characteristics) or any other characteristic protected by applicable law. We also consider qualified applicants with criminal histories, consistent with legal requirements.\nMarqeta endeavors to make reasonable accommodations for applicants with disabilities. If you are an individual with a disability and require a reasonable accommodation to submit this application, complete any pre-employment testing, or otherwise participate in the employee selection process, please submit this form with your specific accommodation request.\nMarqeta cares about your privacy. Personal data that is provided as part of the application and recruitment process is processed in accordance with the Applicant Privacy Notice. Additional information for California residents can be found here.\nTo keep our interview process fair and consistent, we ask that all candidates join video interviews with their camera on.\nNotice on Use of AI in Recruitment\nWe may use artificial intelligence (AI) tools in our recruitment processing consistent with the requirements of applicable laws. For more information, review our AI notice here.","description_format":"text","description_chars":8995,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual bonuses","Equity","Health insurance","Parental leave"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-10-24T08:18:53Z"}],"visa":[],"liveness":{"score":75,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.837,"p_room":0.9,"age_days":19,"expected_fill_days":42,"reasons":["conf:1","win:mid"],"computed_at":"2026-10-25T03:59:57Z"},"pay":null,"html_url":"https://alion.io/job/marqeta-senior-security-engineer-detection-and-response-2","json_url":"https://alion.io/job/marqeta-senior-security-engineer-detection-and-response-2.json","meta":{"generated_at":"2026-10-25T03:59:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5199,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4993},"rest":"https://alion.io/mcp/rest/get_company?id=4993"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmarqeta-senior-security-engineer-detection-and-response-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmarqeta-senior-security-engineer-detection-and-response-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmarqeta-senior-security-engineer-detection-and-response-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/marqeta-senior-security-engineer-detection-and-response-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmarqeta-senior-security-engineer-detection-and-response-2"}]}