Required Qualifications
- 8+ years of experience in information security, with extensive hands-on experience in incident response, threat hunting, and forensic analysis.
- 3+ years leading incident response in cloud environments (AWS and/or GCP required).
- Scripting/automation proficiency (Python, Go, bash) for detection engineering and forensic tooling.
- Deep, working knowledge of cloud IAM least-privilege design, including custom/managed roles, service account or role impersonation risk, workload identity federation, and organization-level policy constraints.
- Deep, hands-on knowledge of Kubernetes (EKS/GKE) and container runtime security, covering container escape scenarios, runtime protection, admission control, and image scanning/provenance.
- Demonstrated experience building or specifying immutable cloud forensics workflows, including automated snapshotting of disks and memory for ephemeral and autoscaled compute.
- Experience advising on (not necessarily authoring) CI/CD pipeline security, covering secrets exposure, build/deploy compromise, dependency, and supply-chain risk.
- 4+ years detecting, analyzing, and mitigating complex threats using SIEM (e.g., Chronicle, Splunk), EDR, DLP, IDS/IPS, and CSPM/CWPP tooling.
- Demonstrated ability to run incident command with authority by directing response across teams during a high-severity, high-visibility cloud incident.
Ideal Candidate Will Thrive In Our Culture
- Is a defender at heart, energized by hunting down and eliminating threats rather than building the platforms they defend.
- Exercises decisive, high-authority judgment in high-pressure, high-severity incidents without waiting for permission to act.
- Communicates cloud-native technical findings clearly to both engineering peers and executive stakeholders.
- Influences architecture and engineering decisions through credibility and technical depth, not direct implementation authority.
- Is highly adaptable, staying ahead of a fast-evolving multi-cloud threat landscape.
The annual base salary listed does not include a company bonus, incentive for sales roles, equity and benefits which will be determined based on experience, skills, education, relevant training, geographic location and role.
IDMe offers comprehensive medical, dental, vision, health savings account, flexible spending accounts (medical, limited purpose, dependent care, commuter benefit accounts), basic and voluntary life and AD&D insurance, 401(k) with company match, parental leave, ability to participate in unlimited paid time off subject to the terms and conditions of the PTO policy, including 8 company wide holidays, short and long-term disability insurance, accident and critical illness insurance, referral bonus policy, employee assistance program, pet insurance, travel assistant program, wellbeing and childcare discounts, benefit advocates, and a learning and development benefit.
Final offers may vary from the amount listed based on qualifications, professional experiences, skills, education, relevant training, geographic location, and other job related factors.