ZipRecruiter

Log In

1

Threat Response Engineer Jobs (NOW HIRING)

Stripe

Security Incident Response Engineer

What you'll do You will leverage your security engineering experience to improve incident response ... Using both threat intelligence and collected telemetry, you will guide and build Stripe-specific ...

Eaton

IT - Incident Response Engineer

Beachwood, OH · On-site

$113K - $165K/yr

Incident Response & Threat Hunting • Provide 24/7/365 (on-call rotation) cyber security incident ... engineering teams to embed security into cloud architecture and support Cloud Security Posture ...

Eaton

IT - Incident Response Engineer

Coraopolis, PA · On-site +1

$113K - $165K/yr

Incident Response & Threat Hunting Provide 24/7/365 (on-call rotation) cyber security incident ... engineering teams to embed security into cloud architecture and support Cloud Security Posture ...

Eaton

IT - Incident Response Engineer

Beachwood, OH · On-site +1

$113K - $165K/yr

Incident Response & Threat Hunting Provide 24/7/365 (on-call rotation) cyber security incident ... engineering teams to embed security into cloud architecture and support Cloud Security Posture ...

Modal

Detection and Response Engineer

Manhattan, NY · On-site

Continuously improve detections based on telemetry, threat intelligence, and lessons learned from ... Experience in detection engineering, incident response, security engineering, or software ...

Modal, Inc

Detection and Response Engineer

New York, NY · On-site

$150K - $270K/yr

Continuously improve detections based on telemetry, threat intelligence, and lessons learned from ... Experience in detection engineering, incident response, security engineering, or software ...

Mixpeek

Detection and Response Engineer

Manhattan, NY · On-site

Continuously improve detections based on telemetry, threat intelligence, and lessons learned from ... Experience in detection engineering, incident response, security engineering, or software ...

Stripe

Security Incident Response Engineer

OR · On-site +1

What you'll do You will leverage your security engineering experience to improve incident response ... Using both threat intelligence and collected telemetry, you will guide and build Stripe-specific ...

previous page

Showing results 41-60

All JobsThreat Response Engineer Jobs

Threat Response Engineer information

See salary details

$29

$66

$96

How much do threat response engineer jobs pay per hour?

As of Sep 9, 2026, the average hourly pay for threat response engineer in the United States is $66.40, according to ZipRecruiter salary data. Most workers in this role earn between $56.49 and $75.48 per hour, depending on experience, location, and employer.

What cities are hiring for Threat Response Engineer jobs?

Cities with the most Threat Response Engineer job openings:

What states have the most Threat Response Engineer jobs?

States with the most job openings for Threat Response Engineer jobs include:

What are popular job titles related to Threat Response Engineer jobs?

For Threat Response Engineer jobs, the most frequently searched job titles are:

Infographic showing various Threat Response Engineer job openings in the United States as of July 2026, with employment types broken down into 96% Full Time, 1% Part Time, and 3% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $138,117 per year, or $66.4 per hour.

Security Incident Response Engineer

Remote

Stripe
Software Development • 1 - 5K employees
Learn more about Stripeexternal

Full-time

This job post has expired today. Applications are no longer accepted.

Job description

About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies-from the world's largest enterprises to the most ambitious startups-use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.
About the team
The Security Incident Response team works to analyze, investigate, and respond to threats before they impact Stripe's business or users. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed, working across multiple AMER time zones, and will regularly coordinate with stakeholders in EMEA and APAC.
What you'll do
You will leverage your security engineering experience to improve incident response capabilities at Stripe. With an emphasis on user and entity behavior analytics, as well as endpoint hardening, you will gain a deep understanding of Stripe's systems, tooling, and workflows to be able to differentiate between legitimate and malicious activity. Using both threat intelligence and collected telemetry, you will guide and build Stripe-specific signals enrichment logic and incident response solutions that scale with our company. Lastly, your analytic capabilities will be critical during security incidents to reduce uncertainty, uncover root causes, and inform future prevention and detection mechanisms.
Responsibilities
  • Analyze and investigate a broad range of threats or activities occurring on client devices
  • Develop requirements for detection models and enhancements to existing systems
  • Collect, transform, and ingest raw data from disparate sources into threat detection pipelines
  • Streamline incident response capabilities, ensuring the tooling and processes are clear
  • Work cross-functionally with security engineering and data science teams to build solutions for analyzing security events data at scale and protecting Stripe networks, systems, and data from threats
  • Provide actionable insights to help identify, prevent, detect, and respond to anomalous or potentially malicious user and entity activity
  • Act as the subject-matter expert and primary contact for stakeholder teams invested in Security Analytics and Detection programs as well as Stripe-wide security initiatives
  • Collaborate effectively with teammates, leading projects, mentoring others, and developing and championing quality standards within the team
Who you are
We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements
  • 3+ years experience analyzing large data sets to solve problems and/or building models with a behavioral approach to security
  • B.S. or M.S. Computer Science or related field, or equivalent experience
  • Expert knowledge of Python and SQL, and familiarity with other programming languages
  • Existing experience with log analysis (e.g. first or third party applications, system / data access, event logs), network security, digital forensics, and incident response investigations
  • Proficiency with developing and using novel analytical methods to build, automate, and improve detection and response systems
  • Ability to communicate results clearly and focus on impact
  • Ability to think creatively and holistically about reducing risk in a complex environment
Preferred qualifications
  • An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.
  • Experience with software engineering, data processing and analysis tools (e.g. Databricks/Jupyter, Trino, etc.)
  • Familiarity with common open-source frameworks for big data processing and/or data science (PySpark, Pandas, Sci-kit Learn, etc.)
  • Experience with tactical threat intelligence and/or hunting for sophisticated threat actors in an enterprise environment
  • Familiarity with network observability, security software, or data engineering solutions (osquery, Splunk/LogScale, etc.)
  • Experience in one or more of the following areas: user and entity behavior analytics (UEBA), security information event management (SIEM), security orchestration automation and response (SOAR), or data loss prevention (DLP)

Apply