Security Engineer, Threat Response

About this role

Asana is seeking a Security Engineer to join their Threat Response team, leading incident detection, response, and vulnerability management efforts. You'll work across the organization to build robust security monitoring, automate operations, and mentor engineers on security best practices while protecting both the company and product.

What you'll do

• Lead security incident detection, analysis, and response with timely remediation and on-call rotation participation
• Manage and mature vulnerability management programs including scanning, assessment, and remediation tracking
• Develop and implement security playbooks and automation scripts to reduce manual security operations work
• Conduct forensic analysis during incidents and lead retrospectives to improve team practices
• Monitor security alerts and threat intelligence feeds to proactively identify emerging threats
• Mentor engineers on incident response and security best practices across the company

What they're looking for

• Security operations and incident response (5+ years)
• SIEM platforms (Panther, Splunk, or Elastic Security)
• Endpoint detection and response tools (CrowdStrike, SentinelOne)
• Security automation scripting (Python, PowerShell)
• Forensic analysis and incident investigation
• Cloud and SaaS security expertise
• MITRE ATT&CK framework knowledge
• Cross-functional communication and stakeholder management

Benefits

• Hybrid work schedule with office presence in NYC or San Francisco (Mon/Tue/Thu in-office)
• Opportunity to mentor and lead security operations teams
• Work with modern security tools and infrastructure