Security Engineer, Detect & Respond

About this role

Join Betterment's Detect & Respond team as a Security Engineer to build and operate detection systems that protect customers and their financial data. You'll develop SIEM-based alerts, participate in incident response, and help secure emerging AI tools across the organization in a collaborative, engineering-focused environment.

What you'll do

• Build and maintain detection capabilities and alerts across Betterment's infrastructure using SIEM platforms
• Participate in security on-call cycles, triaging alerts and improving response processes
• Integrate SaaS application logs into SIEM and manage alert hygiene and administration
• Develop detection coverage for AI-related threats including agent activity, prompt injection, and data exfiltration
• Create automations to reduce manual toil and streamline on-call workflows
• Support incident response activities including triage, investigation, and containment efforts

What they're looking for

• SIEM and SOAR platform experience (search writing, alert building)
• Security operations and incident response knowledge
• MITRE ATT&CK framework familiarity
• Programming or scripting capabilities
• AWS and cloud environment understanding
• SaaS security tools (CrowdStrike, Okta)
• AI security awareness and threat modeling
• Technical writing and communication

Benefits

• Medical, dental, and vision coverage
• Equity grants for all employees
• Flexible paid time off and four-week sabbatical after six years
• Paid parental leave
• Life, AD&D, disability, and infertility support insurance
• Transit benefits and FSA/HSA options