Security Engineer - Incident Response at Peloton

Peloton Interactive, Inc. seeks Security Engineer - Incident Response in New York City, NY. Job Duties: Directly support Peloton’s Security Program while conducting in-depth research and strategic analysis of intelligence data from various sources to leverage in threat hunting. Stay up to date with relevant vulnerabilities, threat actors, indicators of compromise (IOCs) tactics, techniques, and procedures (TTPs), and trends, identifying actionable areas of interest and threats. Provide intel-driven insights into existing and emerging threats, use insights to search Peloton enterprise for activity that is anomalous and/or malicious. Work with Security Engineering and the Security Operations Center to baseline user behaviors and events as well as build out new detections and response workflows. Provide triage support for incident response and investigation efforts as part of Peloton’s Security and Operations team and other internal teams. Recommend and build countermeasures based on threat analysis, intelligence, and forecasting. Develop, implement, and maintain security incident playbooks/runbooks. Prepare and present analysis with findings and recommendations in the form of briefings, reports, and dashboards to managers, various team leads and senior leadership as required. Part-time telecommuting is an option. Hybrid work from Peloton Interactive offices in New York, NY. Salary: $146,557.00 to $194,775.00 Minimum Requirements: Master’s degree (or its foreign degree equivalent) in Computer Science, Informatics, Computer and Information Technology, Engineering (any field), or a related quantitative discipline, and three (3) years of experience in the job offered or in any occupation in related field. Special Skill Requirements: One year of experience in the following: (1) Cloud Workload protection, (2) Cloud Native application protection platform; (3) Cloud Security Posture Management; (4) Threat modeling; (5) OWASP top 10; (6) BURP Suite; (7) SAST; (8) Software Composition Analysis; (9) API Security; (10) code reviews; (11) Kubernetes Security; (12) Web Application Firewall (WAF); (13) ELK Stack; (14) Splunk. Any suitable combination of education, training and/or experience is acceptable. Part-time telecommuting is an option. Hybrid work from Peloton Interactive offices in New York, NY. Salary: $146,557.00 to $194,775.00 per annum. Submit a resume with references to: Req. # L24-158494 via the Peloton Careers webpage: [Upgrade to PRO to see link] or by email at: [Upgrade to PRO to see contact]. #LI-DNI ABOUT PELOTON: Peloton (NASDAQ: PTON) provides Members with expert instruction, and world class content to create impactful and entertaining workout experiences for anyone, anywhere and at any stage in their fitness journey. At home, outdoors, traveling, or at the gym, Peloton brings together innovative hardware, distinctive software, and exclusive content. Founded in 2012 and headquartered in New York City, Peloton has millions of Members across the US, UK, Canada, Germany, Australia, and Austria. For more information, visit www.onepeloton.com. Peloton is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. Equal employment opportunity has been, and will continue to be, a fundamental principle at Peloton, where all team members, applicants, and other covered persons are considered on the basis of their personal capabilities and qualifications without discrimination because of race, color, religion, sex, age, national origin, disability, pregnancy, genetic information, military or veteran status, sexual orientation, gender identity or expression, marital and civil partnership/union status, alienage or citizenship status, creed, genetic predisposition or carrier status, unemployment status, familial status, domestic violence, sexual violence or stalking victim status, caregiver status, or any other protected characteristic as established by applicable law. This policy of equal employment opportunity applies to all practices and procedures relating to recruitment and hiring, compensation, benefits, termination, and all other terms and conditions of employment. If you would like to request any accommodations from application through to interview, please email: [Upgrade to PRO to see contact]. At Peloton, we embrace technology, including AI, to enhance productivity and accelerate innovation in the work we do for our members. However, in our hiring process, our priority remains in getting to know you and your unique qualifications. To ensure a fair and equitable process, we do not permit the use of AI tools during any stage of the application and interview process. In considering you as an applicant, we want to understand your skills, experiences, and motivations without mediation through an AI system. We also want to directly assess your communication skills without the use of an AI tool. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance and the San Francisco Fair Chance Ordinance, as applicable to applicants applying for positions in these jurisdictions. Please be aware that fictitious job openings, consulting engagements, solicitations, or employment offers may be circulated on the Internet in an attempt to obtain privileged information, or to induce you to pay a fee for services related to recruitment or training. Peloton does NOT charge any application, processing, or training fee at any stage of the recruitment or hiring process. All genuine job openings will be posted here on our careers page and all communications from the Peloton recruiting team and/or hiring managers will be from an @onepeloton.com email address. If you have any doubts about the authenticity of an email, letter or telephone communication purportedly from, for, or on behalf of Peloton, please email [Upgrade to PRO to see contact] before taking any further action in relation to the correspondence. Peloton does not accept unsolicited agency resumes. Agencies should not forward resumes to our jobs alias, Peloton employees or any other organization location. Peloton is not responsible for any agency fees related to unsolicited resumes.