About this role
Staff Information Security Engineer
Role Overview
We’re seeking a Staff Information Security Engineer to help lead and evolve our Global Information Security Operation. In this role, you’ll shape incident response strategy, push forward advanced threat detection and defense capabilities, and take point on the most complex security investigations across the enterprise. As a Staff-level engineer, you will operate as a subject matter expert and technical leader, partnering across SOC, Threat Intelligence, Detection Engineering, and Security Engineering to improve Proofpoint’s ability to detect, respond to, and proactively hunt advanced threats. This role includes participation in a 24/7 on-call incident response rotation.
Location: This is a hybrid role based in our Draper, UT or Sunnyvale, CA office 4 days a week.
Key Responsibilities
- Serve as a Level 3 / Staff escalation point for high-severity incidents.
- Lead investigations into APTs, ransomware, insider threats, and cloud compromises.
- Act as incident commander and coordinate response efforts.
- Participate in 24/7 on-call incident response.
- Lead threat hunting across endpoint, network, identity, and cloud.
- Operationalize threat intelligence into detection