Security Engineer, Detect & Respond

About the position

As a Security Engineer on the Detect and Respond team at Betterment, you'll help keep our customers and their money safe by building and operating the detection capabilities our security team depends on every day. You'll work alongside experienced engineers on a team that takes software quality seriously, writing reliable alerts, building integrations, contributing to incident response, and improving the on-call experience. This role is a great fit for an engineer who has a security foundation and wants to grow their craft in a collaborative, engineering-forward environment. This role is based out of our NYC office.

Responsibilities

  • Build and evolve detection and response capabilities across Betterment's infrastructure, with an emphasis on high-signal detection and reliable operational response
  • Help improve our detections over time, using on-call feedback and false positive trends to quiet what's noisy and close the gaps in what we're missing
  • Help bring SaaS application logs from across the organization into our SIEM, coordinating with other teams as needed
  • Participate in Security On Call cycles, responding to alerts and helping improve triage processes over time
  • Contribute to SIEM administration, including lookups, integrations, and alert hygiene
  • Build and maintain automations that streamline the on-call experience and reduce manual toil for Security Engineering
  • Help the team get real leverage out of AI tooling, building it into how we develop detections and run triage, and being open about where it doesn't pull its weight
  • Build detection coverage for our growing AI surface — agent and connector activity, misuse and prompt injection, company data moving through AI tools — much of it detection work without an established playbook yet
  • Help build visibility into how AI tools are used across the organization, partnering with our AI Governance and Workforce Security colleagues as that surface grows
  • Take part in reviews of new systems and data sources alongside engineering partners, helping work out what telemetry we need and what we'd want to detect before those systems ship
  • Support incident response — triage, investigation, and containment — and help keep our response playbooks current as we learn from each one

Requirements

  • 3+ years of experience in security operations or security engineering
  • Experience with common industry SIEM and SOAR platforms, including writing searches and building alerts
  • Familiarity with common attacker tactics and techniques, including frameworks like MITRE ATT&CK, and an interest in turning threat behavior into practical detections
  • Exposure to incident response — alert triage, investigation, or containment work
  • Programming or scripting background; you're comfortable reading and writing code
  • Enthusiasm for AI tools and workflows, with the judgment to know where their output needs verifying and the appetite to introduce new capabilities responsibly
  • Awareness of the security questions AI systems raise — agent and connector permissions, prompt injection, non-human identity, data leaving through AI tools — or the drive to get up to speed quickly
  • Familiarity with cloud environments (AWS) and common SaaS security tools like CrowdStrike or Okta
  • An interest in security engineering as a craft — you want to build things that are reliable, well-documented, and easy for others to maintain
  • Curiosity and a willingness to dig into new tools, data sources, and problem spaces
  • Strong written communication skills — you can write a clear runbook and explain a security concept to a non-technical colleague

Benefits

  • medical, dental, and vision coverage
  • life and AD&D insurance
  • short- and long-term disability
  • infertility support and WPATH-aligned transgender health benefits
  • an Employee Assistance Program (EAP)
  • transit benefits and FSA and HSA options
  • Equity for all employees, including new hire and refresher grants
  • Flexible paid time off
  • paid parental leave
  • a fully paid four-week sabbatical in your sixth year
  • Company-paid professional coaching for all employees
  • Day-one 401(k) match plus matching on qualified student loan payments
Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...

Other Jobs To Apply

Human Resources Manager (Full-Time, Remote) (Remote)

REMOTE ENTRY-LEVEL POSITION - Full/Part-Time Available| Beginner Friendly - Start ASAP

Flight Attendant (PT or FT with Premium Pay)

Aetna Remote Jobs, Aetna Careers Remote @ Joblagii ( Manager Account Management )

Software Engineer Principal (Remote)

Airlines Customer Service Remote Jobs, Remote Airline Jobs Atlanta Apply In USA ( Customer Assi[...]

Amazon Delivery Driver

Senior SOC Analyst - 2nd Shift Weekends

Portuguese (Brazilian or European) Remote Interpreter

Amazon Content Moderator Job (Remote) $22/H ?? Part-Time ?? US

Regulatory and Start Up Specialist (Portuguese speaker) (Fully Remote)

Remote Cyber Security Engineer - Flexible, Part-Time

Tier 1 SOC Analyst - REMOTE

Chat Agent

Remote Amazon Data Entry Jobs - No Experience - Part-Time

Flexible Sortation Warehouse Associate(Smyrna)

Amazon Customer Service - Work From Home $16-$35/hr

Philadelphia Overnight Warehouse Associate with $21-$25/hr Pay

Warehouse Associate (PT/FT with 1st/2nd/3rd shift openings)

Data Entry / Medical Billing Work at Jobs

Registered Nurse Triage and Transitions Team PRN

Administrative Assistant (Remote)

Remote Customer Service Specialist

Warehouse General Labor & Forklift

Remote Call Center Representative

Area Manager II

*New - Infusion Prior Authorization Specialist – Remote Position – (Experienced)

Amazon Work From Home Data Entry Jobs, Amazon Looking To Fill 250 Work-From-Home Jobs Apply For[...]

Earn Extra Cash as a Local Delivery Driver

Sr. Ad Operations Manager, Social Marketing

Warehouse Operations

Warehouse / Supply Assistant

Abbeville,LA:XL Warehouse Associate at Amazon | Hiring

Part-Time Application Reader, Undergraduate Admissions

Amazon Fulfillment Center - Warehouse

Amazon Data Entry Jobs from home - No Experience Needed

Amazon Delivery Driver

Scalehouse Attendant

Resource Liaison

Cashier Assistant (Front End)

Remote Product Tester - $25-45 per hour

amazon flex $15+/ Hour (Sign on Bonus)!

Software Engineer - Prime Video

Entry Level Customer Service - Work From Home ™

Amazon Package Delivery Driver - Earn $20.00 - $28.00/hr

Student Warehouse Operative, Entry Level (No Experience Needed)

Walmart Data Entry Work From Home (Entry Level/No Experience Required)

Clinical Quality PM, One Medical Senior Health

Weekend Remote Chat Support Jobs – Work Saturdays & Sundays Only | $25–$35/hr

Online Proofreader