Enter a job title or keyword
Senior Information Security Engineer (Detection, Automation & AI)
Job Location:
Job Location:
Foster, CA - USA
Yearly Salary:
USD 174000 - 237000
Yearly Salary:
Posted:
7 August 2026 (30 days ago)
Posted:
Application Deadline:
4 December 2026
Application Deadline:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
We are seeking a Senior Information Security Engineer who views security operations through an engineering this role you wont just stare at a pane of glass watching alerts roll in; you will be the architect behind how those alerts are generated triaged and will lead our detection engineering efforts build robust automation pipelines using SOAR and APIs and pioneer the integration of Large Language Models (LLMs) to supercharge our incident response and alert-triage workflows. If you love Python Linux AWS and treating security operations as code this role is for you.
In This Role You Will...
Detection Engineering & SIEM Operations
- Design build test and maintain high-fidelity detection logic within our SIEM platform.
- Map detections to the MITRE ATT&CK framework to ensure comprehensive visibility across threat vectors.
- Continuously tune alerts to minimize false positives and reduce alert fatigue for the operations team.
Automation & Tooling (SOAR & APIs)
- Architect and implement automated playbooks within our SOAR platform to drive down Mean Time to Respond (MTTR).
- Develop custom Python scripts tools and integrations leveraging REST APIs to connect disparate security tools and data sources.
- Treat infrastructure and configuration as code ensuring automated deployments and consistency.
Next-Gen Triage & AI Integration
- Design and implement workflows that leverage LLMs (Large Language Models) to automatically analyze summarize and add context to incoming security alerts.
- Build prompt engineering pipelines or agentic workflows that assist analysts during active investigations drastically cutting down initial triage time.
Incident Response & Cloud Infrastructure
- Act as a senior escalation point for security incidents guiding the team through containment eradication and recovery according to established Incident Response procedures.
- Monitor and secure workloads across AWS and on-premise environments with various operating systems.
- Conduct post-incident reviews to identify root causes and build automated preventions/detections to ensure the same incident doesnt happen twice.
Qualifications
- 8 years of dedicated experience in Information Security Security Operations or DevSecOps engineering roles.
- Deep hands-on experience with either Splunk (SPL Enterprise Security) or ElasticSIEM (ESQL KQL Kibana) for log analysis and detection creation.
- Strong proficiency in Python and a proven track record of building security tools scripts and automation pipelines via APIs.
- Proven experience designing and maintaining automated playbooks in a modern SOAR platform (e.g. Cortex XSOAR Tines etc.)
- Practical experience (or highly advanced personal projects) utilizing LLM APIs (e.g. OpenAI Anthropic AWS Bedrock) to ingest process or summarize textual dataspecifically applied to security logs or triage workflows.
- Solid understanding of core AWS security services (GuardDuty CloudTrail IAM VPC Flow Logs).
- Strong familiarity with industry-standard Incident Response lifecycles (NIST SP 800-61 SANS PICERL). Experience as an Incident Commander Incident Handler strongly desired.
Bonus Qualifications
- Certifications such as CISSP GCIA GCIH or AWS Certified Security - Specialty.
- Experience with Infrastructure as Code (IaC) tools like Terraform.
- Contributions to the open-source security community (tools Sigma rules etc.).
$174000 - $237000 a year
Base Salary Range
There are three major components to compensation for this position: salary Amazon Restricted Stock Units (RSUs) and Zoox Stock Appreciation Rights. A sign-on bonus may be offered as part of the compensation package. The listed range applies only to the base salary. Compensation will vary based on geographic location and level. Leveling as well as positioning within a level is determined by a range of factors including but not limited to a candidates relevant years of experience domain knowledge and interview performance. The salary range listed in this posting is representative of the range of levels Zoox is considering for this position.
Zoox also offers a comprehensive package of benefits including paid time off (e.g. sick leave vacation bereavement) unpaid time off Zoox Stock Appreciation Rights Amazon RSUs health insurance long-term care insurance long-term and short-term disability insurance and life insurance.
About Zoox
Zoox is developing the first ground-up fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics machine learning and design Zoox aims to provide the next generation of mobility-as-a-service in urban environments. Were looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.
Accommodations
If you need an accommodation to participate in the application or interview process please reach out to emailprotected or your assigned recruiter.
A Final Note:
We may use artificial intelligence (AI) tools to support parts of the hiring process such as reviewing applications analyzing resumes or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed please contact us.
Required Experience:
Senior IC
About Company
We’re reinventing personal transportation—making the future safer, cleaner, and more enjoyable for everyone. This is on-demand autonomous ride-hailing.
