Security Engineer, Threat Response

About this role

Asana seeks an experienced Security Engineer to lead threat detection, incident response, and vulnerability management within their Security Threat Operations and Response Management team. You'll work across NYC or San Francisco offices, partnering with infrastructure and product teams to build scalable security monitoring, automate operations, and establish security-first practices.

What you'll do

• Lead security incident detection, analysis, and response with timely remediation
• Participate in on-call rotation and set incident management standards
• Develop and manage vulnerability scanning, assessment, and remediation programs
• Optimize security tools including Panther SIEM and CrowdStrike EDR platforms
• Create security automation scripts and playbooks to reduce manual operations
• Conduct forensic analysis and lead incident retrospectives for continuous improvement

What they're looking for

• Security operations and incident response (5+ years)
• SIEM platforms (Panther, Splunk, Elastic Security)
• Endpoint detection and response (EDR) tools
• Security automation using Python, PowerShell, or orchestration tools
• Forensic analysis and investigation techniques
• MITRE ATT&CK framework and attack TTPs
• Cloud security or SaaS environment expertise
• Technical communication across stakeholder levels

Benefits

• Hybrid schedule with Monday, Tuesday, Thursday in-office requirements
• Based in NYC or San Francisco office locations
• Optional work-from-home on Wednesdays for most employees
• Opportunity to mentor and lead security engineering teams
• Involvement in tabletop exercises and strategic security initiatives
• Access to modern security tools and platforms