Security Engineer

The AppLovin Threat Operations and Engineering team is looking for a Security Engineer to help protect and defend the AppLovin network and users from threats. You will use your skills to help monitor and secure our large and complex technology stacks. The ideal candidate will be a good communicator and team player, and know how to explain complex security issues with simple terms. The candidate will have a strong background in security operations, penetration testing methodologies, and incident response. The ideal candidate has experience using Google SecOps (or other SIEM/SOAR platforms), penetration testing or bug bounty hunting, and a background in systems administration.

What you'll be doing:

• Monitor SIEM alerts and perform actions to triage and remediate threats.

• Perform penetration tests against AppLovin applications and technologies, and use the output of tests to confirm detection coverage.

• Provide support for internal and external purple team engagements

• Assist with managing bug bounty queue

• Protect and secure cloud infrastructure by monitoring CNAPP tools and alerts.

• Configure and tune Google SecOps, and provide support for rule creation as well as log ingestion and parsing.

Your background and who you are:

• 2-4 years of experience working in a SOC, for an MDR, or in Incident Response.

• At least one year of penetration testing experience, specifically web application and cloud infrastructure testing.

• Familiar with Linux, MacOS, and Windows operating systems.

• Working knowledge of Python or at least one scripting language is highly desired.

• A systems administration or systems engineering background is highly desired.

• Experience with Google Cloud Platform (GCP) is highly desired.

Bonus Points:

• Relevant security industry certifications, such as Security+, GSEC, GCIA, GSOC, GPEN, OSCP or similar.

• Expertise with CrowdStrike EDR management and configuration.

• Experience with basic digital forensics tools and methodologies.

• Conference talks, workshops, or open source code projects related to defensive or offensive security.