[Hiring] Senior Security Engineer - Detection & Response @Marqeta

Role Description

We are seeking a UK-based Staff Security Engineer to serve as a technical leader within our Security Operations and Response Team. As a senior technical responder, you will:

• Lead our incident response program.
• Proactively monitor Marqeta's environment for cyber threats.
• Serve as incident commander during security events of all severity levels.
• Establish response methodologies aligned with the NIST Incident Response Lifecycle.
• Maintain the cybersecurity incident response plan.
• Drive continuous improvement of our security operations.
• Provide technical leadership across the organization.
• Mentor team members.
• Participate in 24x7 on-call rotations.

This role can be performed remotely anywhere in the UK, or from our London, UK office.

Qualifications

• 5+ years of hands-on experience in security operations.
• Strong expertise in incident response, digital forensics, and threat hunting.
• Experience serving as an incident commander or leading incident response workstreams.
• Strong knowledge of the NIST Incident Response Lifecycle.
• Proficiency with security monitoring and forensic tools including EDR, SIEM, and SOAR systems.
• Experience developing detections-as-code.
• Working knowledge of MITRE ATT&CK.
• Experience contributing to post-incident reviews.
• Solid understanding of threat actor TTPs.
• Experience tuning security solutions and developing automation workflows.
• Working knowledge of AWS cloud services and securing cloud environments.
• Ability to effectively communicate with technical and non-technical stakeholders.
• Experience in payment processing, fintech, or other highly regulated environments.
• Proven ability to work independently while demonstrating sound judgment.
• Willingness to mentor and support the growth of junior security professionals.

Requirements

• Proactively monitor Marqeta’s environment for cyber threat activity.
• Manage day-to-day security alerts through timely analysis, triage, and appropriate response actions.
• Serve as incident commander during security events, directing investigation strategies.
• Execute incident response activities aligned with the NIST Incident Response Lifecycle.
• Contribute to the maintenance and improvement of the Cybersecurity Incident Response Plan (CIRP).
• Participate in 24x7x365 on-call rotations.
• Research threat intelligence sources and contribute to hypothesis-driven threat hunting initiatives.
• Work closely with Security Engineering to tune security solutions.
• Design, develop, and maintain detection logic using a detections-as-code approach.
• Contribute to detection coverage mapped to MITRE ATT&CK framework.
• Coordinate with HR, law enforcement, response retainers, and cyber insurers as required.
• Support the development of less-experienced security team members.
• Partner with Fraud, Compliance, and Risk teams on security events.

Benefits

• Premium Private Medical and Dental coverage.
• Generous time off program with additional “Floating Holiday days.”
• Retirement savings program with company contribution.
• Equity in a publicly-traded company and an Employee Stock Purchase Program.
• Monthly stipend to support our remote work model.
• Annual development stipend to support our people's growth and development.
• Family-forming benefits and up to 20 weeks of Parental Leave.
• Wellbeing programs i.e. Modern Health, HealthKick and much more.