Sr. Incident Response Engineer

Overview

Frontdoor is reimagining how homeowners maintain and repair their most valuable asset – their home. As the parent company of two leading brands, we bring over 50 years of experience in providing our members with comprehensive options to protect their homes from costly and unexpected breakdowns through our extensive network of pre-qualified professional contractors. American Home Shield, the category leader in home service plans with approximately two million members, gives homeowners budget protection and convenience, covering up to 23 essential home systems and appliances. Frontdoor is a cutting edge, one-stop app for home repair and maintenance. Enabled by our Streem technology, the app empowers homeowners by connecting them in real time through video chat with pre-qualified experts to diagnose and solve their problems. The Frontdoor app also offers homeowners a range of other benefits including DIY tips, discounts and more. For more information about American Home Shield and Frontdoor, please visit frontdoorhome.com.

Responsibilities

Summary: As a Senior Incident Response Engineer, you will work with a team of highly capable engineers with various degrees of experience in a newly formed IR practice. The team lives the mantra of “We don’t make insecure impossible, we make secure irresistible” as they manage IR duties and engineering in a remote first, cloud native company. The engineer conducts full-cycle incident response activities—such as alert triage, investigation, containment, remediation, and reporting—while ensuring sensitive cases are managed with proper approvals and confidentiality. Additionally, the position requires strong technical and communication skills, supports process improvements and documentation, and focuses on automating routine investigations to enhance the organization's security posture and enable more impactful responses.

Responsibilities:

• To excel in this role, you should have
• At least 8 years in security with 3 of those in incident response
• Experience running incidents from a security responder point of view
• Excellent communication skills
• An eagerness to partner with other teams and an understanding that security means the proper application of friction, not just speed bumps and blockers.
• Excellent mentoring and teaching skills and an overall eagerness to help guide more jr engineers into more senior roles.
• You should be a cooler in tense situations regarding incidents, level of risk acceptance, and how to manage work during these situations in order to provide investigatory support to the organization.
• Experience using a logging platform like LogScale, ELK or Splunk
• Experience with cloud security in AWS, GCP, Azure or Oracle Cloud.
• Deep experience in EDR or XDR and tools like Crowdstrike, CarbonBlack, SentinleOne etc
• Experience with container security, meaning you have created, understand the process and know what to do, where to look, how processes inside a container are viewed from the OS/Host level.

Qualifications

Required Skills:

• Network Fundamentals
• Windows OS Internals
• Mac OS Internals
• Data Leakage Prevention - Classification to Containment to Remediation
• 7 years in the security field with 3 of those years in Incident Response
• Strong writing skills and communication skills.
• Demonstrated ability to think strategically and make effective and timely decisions.

Technology and Systems:

• AWS, GCP, and Azure cloud infrastructure
• Docker, Kubernetes
• Logscale, Elastic, Tines or another Automation tool
• Zscaler, Palo Alto Networks
• Programming / Scripting
• Python, Bash, Shell Script

Preferred Skills:

• Experience with cloud security incident response in AWS or similar environments.
• Familiarity with threat intelligence platforms and external threat feeds.
• Experience supporting investigations involving data exfiltration or insider risk.
• Exposure to security automation, alert enrichment, or response orchestration tools.
• Knowledge of email security platforms and phishing response workflows.

Physical Role Requirements: Be seated at a computer intermittently for up to eight hours a day. Move up to 10 pounds occasionally, by lifting, carrying, pushing, pulling, or otherwise repositioning objects. Sitting for long periods of time while using office equipment such as computers and phones. Repetitive motions using hands and digits, such as movement of wrists, hands and fingers while picking, pinching and typing during your normal working environment.

Minimum Education, Licensure and Professional Certification requirements: Bachelor’s degree required in computer science, cybersecurity, IT or related field

Minimum Experience required: 7+ years of experience required in Security Operations, Incident Response, or Security Engineering roles.

Travel: N/A

Other/State Specific

This role pays between $133k to $155k, and your actual base pay will depend on your skills, qualifications, responsibilities, experience, and location.

At Frontdoor certain roles are eligible for additional rewards and incentives. Speak directly to your recruiter to learn more.

Our approach to benefits is holistic, and includes health, wellbeing and financial components including: insurance for medical/pharmacy, dental, vision, life, and disability, weight loss and smoking cessation programs, matching 401(k) and ability to participate in our employee stock purchase plan.