Remote Staff Security Engineer - EU/UK in Devon

We are seeking a UK-based Staff Security Engineer to serve as a technical leader within our Security Operations and Response Team. As a senior technical responder, you will lead our incident response program, proactively monitor Marqeta's environment for cyber threats, and serve as incident commander during security events of all severity levels. You will establish response methodologies aligned with the NIST Incident Response Lifecycle, maintain the cybersecurity incident response plan, and drive continuous improvement of our security operations. This position requires extensive expertise in incident response, digital forensics, threat hunting, and security monitoring technologies. You will provide technical leadership across the organization, mentor team members, and participate in 24x7 on-call rotations.

Your role:

• Proactively monitor Marqeta's environment for cyber threat activity and manage day-to-day security alerts through timely analysis, triage, and appropriate response actions.
• Serve as the incident commander during security events of all severity levels, directing investigation strategies and coordinating cross-functional response efforts.
• Deliver NIST Incident Response Lifecycle aligned services to prepare for, detect, contain, eradicate, recover, and learn from cybersecurity incidents.
• Work with the CISO to maintain the Cybersecurity Incident Response Plan (CIRP), ensuring alignment with government and law enforcement reporting requirements.
• Document and maintain Security Operations processes, procedures, playbooks, and runbooks to ensure consistent and effective response operations.
• Participate in 24x7x365 on-call rotations, providing expert-level guidance during security incidents and conducting thorough post-incident reviews.
• Proactively research threat intelligence sources to develop and lead hypothesis-driven threat hunting initiatives to uncover threats in corporate and production environments.
• Work closely with Security Engineering to tune security solutions, enhance detection capabilities, and leverage business knowledge to improve security monitoring.
• Design, develop, and maintain detection logic using a detections-as-code approach, collaborating with Security Solution Engineering to deploy detections through CI/CD pipelines into our SIEM and EDR platforms.
• Maintain and expand detection coverage mapped to MITRE ATT; familiarity with PCI DSS incident handling requirements a plus.
• Proven ability to work independently while demonstrating sound judgment about when to engage team members or escalate issues.
• Strong mentorship abilities with a track record of developing junior security professionals in incident response techniques.

Manager: Derek Samford

Recruiter: Louise Devlin

Typical Process: Application submission, Recruiter phone or video call, Hiring manager video call, Virtual 'Onsite' consisting of 4-5, 45 min interviews, Offer!

Compensation and Benefits:

• Premium Private Medical and Dental coverage.
• Generous time off program with additional “Floating Holiday days”.
• Retirement savings program with company contribution.
• Equity in a publicly-traded company and an Employee Stock Purchase Program.
• Monthly stipend to support our remote work model.
• Annual development stipend to support our people's growth and development.
• Family-forming benefits and up to 20 weeks of Parental Leave.
• Wellbeing programs i.e. Modern Health, HealthKick and much more.