Note: The job is a remote job and is open to candidates in USA. GoDaddy is empowering everyday entrepreneurs around the world by providing the help and tools to succeed online. They are seeking a highly skilled Senior Security Engineer to lead complex incident response and forensic investigations while modernizing security operations through automation and AI-driven capabilities.
Responsibilities
- Lead high-priority incident response and forensic investigations, serving as the primary escalation point for advanced analysis, containment, recovery, root cause determination, and executive-level reporting
- Drive threat detection and response across AWS, Windows, macOS, Linux, and endpoint security platforms, leveraging services such as GuardDuty, Security Hub, Detective, CloudTrail, IAM, VPC Flow Logs, and SentinelOne
- Conduct malware analysis, host and cloud forensics, evidence collection, and threat hunting activities to identify attack vectors, persistence mechanisms, and business impact while maintaining sound investigative practices
- Design and implement automated security workflows, AI-assisted playbooks, and AWS-native response capabilities to improve detection accuracy and reduce MTTD and MTTR
- Partner with Security, IT, and DevOps teams to enhance security posture, improve processes and tooling, develop detection content, and mentor junior security engineers
Skills
- 5+ years of cybersecurity experience, including 2+ years in senior Incident Response, Security Operations, Threat Detection, or Digital Forensics roles
- Deep expertise securing and investigating AWS environments, including IAM, CloudTrail, Config, CloudWatch, GuardDuty, Security Hub, Detective, VPC Flow Logs, S3 logging, and serverless security controls
- Experience conducting forensic investigations, evidence collection, log analysis, malware triage, and cloud-based incident investigations while maintaining chain-of-custody best practices
- Strong scripting and automation skills with Python, PowerShell, and/or Bash, including building security automations using AWS services such as Lambda, Step Functions, and EventBridge; experience applying AI and ML technologies to security operations is highly desirable
- Strong communication and investigative skills, including technical reporting, executive presentations, and preferred certifications such as AWS Security Specialty, GCIH, GCFA, GCIA, OSCP, or CISSP
- Experience with digital forensics platforms such as AXIOM, F-Response, Timesketch, Volatility, Velociraptor, or other enterprise investigation tools
- Experience with additional EDR/XDR platforms such as CrowdStrike, Microsoft Defender, or Carbon Black
- Expertise building and maintaining SOAR platforms, automated response workflows, and cloud-native security operations
- Experience with AI security technologies including Amazon Bedrock, Microsoft Security Copilot, Google SecOps/Chronicle, or open-source LLM integrations
- Familiarity with multi-account AWS environments, AWS Organizations, CSPM solutions, and cloud security frameworks such as Prowler, Trusted Advisor, or CNAPP platforms
Benefits
- Generous time off
- Parental and wellness leave
- Healthcare
- Retirement savings program
- Comprehensive benefits package
- Medical, dental, and vision insurance
- 401(k)-retirement plan
- Paid sick time
- Paid flexible time off
- Paid parental leave
- Life insurance
- Short- and long-term disability
- AD&D insurance
- Mental health or EAP programs
- Remote or hybrid work options
- Paid holidays
- Paid Wellness days
- Tuition assistance
- Adoption
- Surrogacy, and fertility benefits
- Dependent daycare and backup care benefits
- Employee stock purchase plan
- Financial education and advice
- And other benefits in accordance with GoDaddy’s benefit plans and applicable law
- This role is eligible for a comprehensive benefits package
Company Overview
Company H1B Sponsorship