Security Engineer

Join Etched, a company dedicated to building a secure and friction-free computing environment. As a Security Engineer, you will protect our networks, systems, and applications, ensuring the security of our intellectual property and high-performance compute clusters. You will design, implement, and operate our monitoring, detection, and response infrastructure, and partner with various teams to build secure and user-friendly systems. This role requires hands-on technical expertise, a focus on scalability and automation, and a commitment to maintaining a strong security posture while enabling innovation.

• Design, implement, and operate the monitoring, detection, and response infrastructure that safeguards Etched’s intellectual property, high-performance compute clusters, and developer workflows across both on-prem and cloud environments.
• Take ownership of Etched’s security posture across infrastructure, IT, and applications, driving proactive threat detection, real-time monitoring, and rapid incident response.
• Develop tools, automation, and workflows that evolve with our rapidly growing and expanding footprint and ensure that security enhances, rather than hinders, innovation.
• Hands-on experience managing or building security telemetry pipelines, log ingestion frameworks, or observability systems that support both structured and unstructured data
• Experience performing vulnerability assessments, penetration testing, or secure configuration reviews and collaborating with teams to remediate identified risks
• Familiarity with IAM and SSO systems such as Okta, Google Workspace, and FreeIPA and the ability to design secure identity, access, and authentication policies
• Experience implementing or supporting zero trust architectures, including conditional access, SASE, CASB, and identity-driven access control models
• Strong networking knowledge, including SDWAN, VPN, IDS and IPS, firewall administration, segmentation strategy, and monitoring of network traffic for anomalies
• Deep understanding of EDR and XDR platforms, endpoint security hardening, and telemetry collection across macOS, Linux, Windows, and server environments
• 5-7+ years of experience in security engineering, SOC operations, detection engineering, incident response, or a similar role that blends hands-on technical work with analytical problem solving
• Solid understanding of threat modeling, the MITRE ATT and CK framework, attacker tradecraft, and common detection and response patterns
• Strong software engineering skills with Python, Go, Bash, (C and Rust a major plus), including the ability to design, implement, and maintain high-quality code, automation frameworks, services, and integrations that improve security, observability, and operational efficiency
• Proficiency with SIEM and SOAR platforms, including experience building detections, dashboards, and automated workflows
• Exposure to cloud and hybrid environments such as AWS, GCP, or on-prem clusters and the ability to evaluate risks and implement protective controls across these environments