Etched.ai

Security Engineer

San Jose$150k–$250kfulltimemidAdded today

About this role

Etched seeks a Security Engineer to design and operate comprehensive security infrastructure protecting AI hardware development across on-premises and cloud environments. This role combines hands-on technical work with system design, focusing on threat detection, incident response, and automation while enabling engineering velocity.

What you'll do

Harden security baselines across hybrid/cloud systems and manage vulnerability patching programs
Build centralized telemetry pipelines and SIEM/SOAR solutions for unified monitoring and detection
Implement zero-trust network architectures, SASE controls, and conditional access policies
Investigate security incidents, perform root-cause analysis, and coordinate remediation efforts
Develop automation scripts and detection logic for identifying insider threats and anomalous behavior
Establish security metrics, dashboards, and promote security awareness across engineering teams

What they're looking for

SIEM/SOAR platform operation and configuration
Zero-trust architecture and network security design
Vulnerability management and patch automation
Identity/access management (Okta, Google Workspace, FreeIPA)
EDR/XDR and endpoint security tools
Incident response and forensic investigation
Infrastructure hardening (on-prem, hybrid, cloud)
Scripting/automation and monitoring tool integration

Likely interview questions

Walk us through your experience designing and implementing zero-trust network architectures. How have you balanced security controls with maintaining developer velocity?
Describe your hands-on experience with SIEM and SOAR platforms. How have you developed detection logic and automation playbooks to identify threats like lateral movement or insider activity?

Tell us about a time you managed a security incident in a complex, multi-environment setup (on-prem, hybrid, cloud). How did you approach root-cause analysis and remediation?
What experience do you have integrating identity and access management tools like Okta, Google Workspace, or FreeIPA? How would you implement conditional access policies across heterogeneous environments?
How would you approach building a centralized security telemetry pipeline to aggregate logs from networks, compute clusters, and cloud services? What tools and architectures have you used?
Describe your experience with vulnerability management and patching programs at scale. How do you measure and communicate security posture improvements to non-security teams?
Tell us about automation or scripting work you've done to improve SOC efficiency. What languages or tools do you prefer, and how do you approach tuning detection logic to reduce false positives?

Unlock all 7 questions free — and practice them live →

Apply on the employer's site →

Opens the official application on the employer’s site. No login required.