cybersecurity incident response engineer, senior

$118,700 - $209,600/Yr

Starbucks - Seattle, WA

Full-time - Senior

Remote - Seattle, WA

Food Services and Drinking Places

About the position

As a Senior Cybersecurity Incident Response Engineer at Starbucks, you will play a crucial role in safeguarding the company's digital assets and ensuring the integrity of its information systems. This position is integral to the success of Starbucks, as it involves the investigation and response to cybersecurity incidents that could potentially impact the organization. You will be expected to leverage your strong problem-solving skills and excellent communication abilities to navigate complex security challenges. A deep technical understanding of modern cybersecurity threats and the relevant protections against them is essential for this role. You will be a proactive leader, taking ownership of issues and guiding others to take action, fostering a collaborative environment where teamwork is key to achieving security objectives. In this role, you will identify, triage, and investigate potential security incidents, coordinating containment, remediation, and root cause analysis efforts. Your responsibilities will include conducting endpoint, network, and cloud forensics, as well as documenting and implementing runbooks and standard operating procedures for incident response. You will also design and develop tooling and capabilities to support and automate response activities, acting as a mentor and escalation point for junior team members. Your work will be guided by Starbucks' principles, ensuring that you model the values of the company while executing your duties.

Responsibilities

• Identifies, triages, and investigates potential security incidents.
• Coordinates containment, remediation, and root cause analysis for security incidents.
• Conducts endpoint, network, and cloud forensics.
• Documents and implements runbooks and standard operating procedures for incident response.
• Designs and develops tooling and capabilities to support and automate response activities.
• Acts as a mentor and escalation point for more junior members of the team.
• Models and acts in accordance with Starbucks guiding principles.

Requirements

• 5+ years of experience working in an information technology / information security discipline.
• 2+ years of additional experience leading cybersecurity incident response.
• Deep technical understanding of modern cybersecurity threats.
• Experience with threat hunting for threat actor TTPs based on MITRE ATT&CK framework.
• Ability to quickly learn new technology concepts.
• Effective communication skills with both technical and non-technical audiences.
• Understanding of compliance and regulatory requirements such as SOX and PCI.
• Ability to balance multiple priorities and meet deadlines.
• Strong collaboration mindset.
• Excellent problem-solving abilities.
• Passionate about cybersecurity and self-driven to become an expert.

Nice-to-haves

• Proficient in programming with at least one modern language such as Java, Python, Ruby, Go, or C#.
• Ability to automate tasks and interact with APIs using common scripting languages.
• Experience deploying, configuring, and troubleshooting cybersecurity controls in enterprise environments.
• Certifications such as CISSP, GCIH, OSCP, or others focused on cybersecurity, incident response, or threat actor techniques.

Benefits

• Access to medical, dental, vision, basic and supplemental life insurance.
• Short-term and long-term disability coverage.
• Paid parental leave.
• Family expansion reimbursement.
• Paid vacation from date of hire.
• Sick time accrued at 1 hour for every 25 hours worked.
• Eight paid holidays and two personal days per year.
• Participation in a 401(k) retirement plan with employer match.
• Discounted company stock program (S.I.P.).
• Starbucks equity program (Bean Stock).
• Incentivized emergency savings and financial well-being tools.
• 100% upfront tuition coverage for a first-time bachelor's degree through Arizona State University's online program.
• Student loan management resources and access to other educational opportunities.
• Backup care and DACA reimbursement.