Senior Detection and Response Engineer
Join a movement in which everyone can win. We started a movement in which everyone can win – shoppers, retailers, society and every person on our team. To play fair, trust people and reward them for doing the right thing. We see and feel the impact of our work as more and more people gain financial freedom and retailers grow across the globe.Founded five years ago in Sydney, Australia, Afterpay has over 11 million active customers globally and more than 64,000 of the world’s best retailers around the world including Anthropologie, Revolve, DSW, GOAT, Finish Line, Levi’s, Mac Cosmetics, Ray-Ban and many others. Afterpay is on a mission to power an economy in which everyone wins. Afterpay is completely free for customers who pay on time – helping people spend responsibly without incurring interest, fees or extended debt. Afterpay empowers customers to access the things they want and need, while still allowing them to maintain financial wellness and control, by splitting payments in four, for both online and in-store purchases. Afterpay is deeply committed to delivering positive outcomes for customers. We are focused on supporting our community of shoppers.We trust in the next generation and share a vision of a more accessible and sustainable world in which people are rewarded for doing the right thing.
The Team
Afterpay’s mission is to be the world’s favourite way to pay. It’s our security team’s job to ensure that we’re also the world’s most trusted way to pay.
To do that, we’re building and maintaining:
• A company-wide culture that values information security
• An effective information security program
• A talented security team
We are strong believers that the security team should not be the team of NOPE - instead, we believe that our job is to understand our partner’s goals and to work with them to achieve those goals.
We believe that we can only achieve all of this by making Afterpay a great place for talented information security professionals to work. Our team values are:
• Partnership - we understand the business and technical priorities and work to support them. We link our initiatives to the needs of the business
• Respect - we aim to build respect with every interaction by being subject matter experts, by communicating clearly and by being human. We also work to develop one another as security professionals with the understanding that we’re better when we work as a team
• Empathy - we know that people have competing priorities and we try to put ourselves in their shoes
• Pragmatism - we make sure that we’re making reasonable recommendations and that we’re not being overly dogmatic
• Measurability - we think about how we’ll measure the effect of our actions before we take them. We focus on measuring our work so we can show the impact we’re having and so we can continually improve
We are looking for passionate colleagues to join the rocketship and help us!
The Opportunity
As Afterpay’s Senior Detection and Response Engineer, you’ll be responsible for:
• Knowing who our adversaries are and their favored techniques
• Ensuring that we can detect those adversaries and techniques
• Designing and drilling an effective response to those techniques
To do this they need not only to respond to alerts but also to design, implement and manage the systems that create those alerts. It also means practicing our responses by training with our business stakeholders.
We’re big believers that the best way to scale a detection and response function is to focus on automation and on aligning the incentives of the people on the team. We aren’t a company that will measure the efficacy of our detection function based on the number of alerts they fire in a day - instead we want to focus on building controls that give us the best chance of detecting adversaries in ways that are unlikely to lead to false alarms or wasted time.
Being a part of our detection and response function will require you to be technical. You’ll understand adversary behaviour and have experience with using automation to solve detection and response problems. You’ll be calm under pressure and a team player.
As a senior member of our team, we will also look to you to help us build a great team culture, enjoy the ride and have a laugh along the way.
We are much more than our job descriptions, but here’s where you will begin….
• Use and generate intelligence to understand adversaries and their business impact
• Prioritize, design and deploy detection systems for our adversaries
• Assist with the operation our security monitoring tooling
• Create and maintain response runbooks
• Prioritise and respond to alerts generated by our monitoring tooling
• Assist with the maintenance and operation of our crisis management plans
• Participate with industry to learn about and share knowledge of adversaries
Who are you?
Like us, you’ll be deeply committed to delivering positive outcomes for customers and passionate about shaping the future of Afterpay.
• Self-driven - We afford our team members a lot of autonomy. Our style is to agree on a set of goals and metrics up front and to empower people to get their jobs done.
• Creative - We value team members who are able to find smart ways to balance risk and requirement. We aren’t a team that dogmatically follows established security processes.
• Technical - We value team members who understand attacker behavior as well as our operating environment who can then design detection solutions that are appropriate.
• Calm - Detection and response work can be stressful. Succeeding in this role will require someone who can remain calm in a crisis.
• Disciplined - Delivering against our goals requires someone who is able to keep themselves honest and to continue to move forward regardless of what is happening around them.
• Hungry for improvement - We value identifying and implementing smarter ways of achieving our goals as well as leveling up the skills of the team.
How we reward you. We have a pay for performance culture so you can expect to be rewarded for high performance. We pride ourselves on fairness and offer a competitive total reward package made up of salary, incentives and benefits including the opportunity to enroll in our share matching plan. We have a strong focus on health and wellbeing at Afterpay as we aim to support you to succeed in both your career and personal lives, such as providing employees with a corporate membership to Headspace. We offer a wide range of insurance programs so you have the flexibility to choose what is best for you. Afterpay covers 100% of the employee cost and 75% of the cost of your dependents. We value diversity and a collaborative and inclusive environment where everyone feels they belong is important to us.
How to Apply: We don’t know what the future holds. That’s the exciting part; we show up and make it happen. If you’re brave, if you’re committed to doing the right thing and excited by this opportunity, click apply now!
Afterpay is continuing to hire for all open roles with all interviewing and on-boarding done virtually due to COVID-19. All new team members, in addition to current staff, will temporarily work from home until it is safe to return to our offices.