← All roles

Security Engineer, Detect & Respond

Betterment· Platform Engineering
Apply on company site
Hybrid (New York City)$145k - $180kfull-timePosted 3w ago

About the role

Security Engineer on the Detect and Respond team at Betterment, responsible for building and operating detection capabilities, improving detections, SIEM/SOAR integrations, incident response, and on-call automation in a hybrid New York City office environment.

Responsibilities

  • Build and evolve detection and response capabilities across Betterment's infrastructure, with an emphasis on high-signal detection and reliable operational response
  • Help improve detections over time using on-call feedback and false positive trends
  • Help bring SaaS application logs from across the organization into our SIEM, coordinating with other teams
  • Participate in Security On Call cycles, responding to alerts and improving triage processes
  • Contribute to SIEM administration, including lookups, integrations, and alert hygiene
  • Build and maintain automations that streamline the on-call experience and reduce manual toil
  • Incorporate AI tooling into detection development and triage while assessing limitations
  • Build detection coverage for AI-related surfaces (agent/connector activity, misuse, prompt injection, data in AI tools)
  • Assist in reviews of new systems and data sources to determine telemetry and detections
  • Support incident response—triage, investigation, containment—and keep playbooks current
  • Collaborate with partners to define telemetry needs and detection requirements for new systems

Qualifications

  • 3+ years of experience in security operations or security engineering
  • Experience with common SIEM and SOAR platforms, including writing searches and building alerts
  • Familiarity with attacker tactics and MITRE ATT&CK framework, and translating threat behavior into detections
  • Exposure to incident response—alert triage, investigation, or containment
  • Programming or scripting background; comfortable reading and writing code
  • Interest in AI tools and workflows with prudent verification and responsible adoption
  • Awareness of AI-related security questions (agent/connector permissions, prompt injection, non-human identity, data exfiltration)
  • Familiarity with AWS and common SaaS security tools like CrowdStrike or Okta
  • Interest in security engineering as a craft—reliable, well-documented, maintainable systems
  • Curiosity and willingness to learn new tools, data sources, and problem spaces
  • Strong written communication skills to document runbooks and explain security concepts to non-technical colleagues

Skills

Required:Security operationsSIEM and SOARThreat detectionProgramming/scriptingCloud and SaaS securityCommunication
Nice to have:Incident responseAI tooling

Benefits

  • Medical, dental, and vision coverage
  • Life and AD&D insurance; short- and long-term disability
  • Infertility support and WPATH-aligned transgender health benefits
  • Employee Assistance Program (EAP)
  • Transit benefits and FSA and HSA options
  • Equity for all employees (new hire and refresher grants)
  • Flexible paid time off, paid parental leave
  • Fully paid four-week sabbatical in sixth year
  • Company-paid professional coaching
  • Day-one 401(k) match plus matching on qualified student loan payments
Last updated Sep 30, 2026. Interested? Apply on the company site.

About Betterment

Automated investing & Financial planning

Betterment can help grow your money by making saving and investing easy. Invest in a tailored portfolio, set buckets for your goals, and earn rewards.

investingfinancial planningsavingretirementtax-smart technologyinvestment portfolioscash management
Company profileWebsite

More open roles at Betterment